topic Why has Splunk stopped indexing my files? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Why-has-Splunk-stopped-indexing-my-files/m-p/254352#M48849 <P>Customer reported that a standalone Splunk Indexer had stopped indexing any monitored files.<BR /> They also noticed that :</P> <UL> <LI>Splunks _internal index was no longer been written to.</LI> <LI>The Splunk GUI was available and "splunk status" showed splunk was running</LI> <LI>Splunks log files in $SPLUNK_HOME/var/log/splunk were being written to corectly</LI> </UL> Thu, 26 Jan 2017 08:50:58 GMT dshakespeare_sp 2017-01-26T08:50:58Z Why has Splunk stopped indexing my files? https://community.splunk.com/t5/Getting-Data-In/Why-has-Splunk-stopped-indexing-my-files/m-p/254352#M48849 <P>Customer reported that a standalone Splunk Indexer had stopped indexing any monitored files.<BR /> They also noticed that :</P> <UL> <LI>Splunks _internal index was no longer been written to.</LI> <LI>The Splunk GUI was available and "splunk status" showed splunk was running</LI> <LI>Splunks log files in $SPLUNK_HOME/var/log/splunk were being written to corectly</LI> </UL> Thu, 26 Jan 2017 08:50:58 GMT https://community.splunk.com/t5/Getting-Data-In/Why-has-Splunk-stopped-indexing-my-files/m-p/254352#M48849 dshakespeare_sp 2017-01-26T08:50:58Z Re: Why has Splunk stopped indexing my files? https://community.splunk.com/t5/Getting-Data-In/Why-has-Splunk-stopped-indexing-my-files/m-p/254353#M48850 <P>In splunkd.log the following error was observered</P> <PRE><CODE>WARN TailingProcessor - Called run() on disabled instance. Will not run. </CODE></PRE> <P>This message appears when disabled=true is set in a global/default stanza in inputs.conf<BR /> In $SPLUNK_HOME/etc/system/local/inputs.conf it was found that the following stanza had been mistakenly set</P> <PRE><CODE>[default] disabled = 1 index = test sourcetype = testing </CODE></PRE> <P>When this stanza was removed and Splunk was restarted, indexing resumed correctly</P> Thu, 26 Jan 2017 08:59:15 GMT https://community.splunk.com/t5/Getting-Data-In/Why-has-Splunk-stopped-indexing-my-files/m-p/254353#M48850 dshakespeare_sp 2017-01-26T08:59:15Z Re: Why has Splunk stopped indexing my files? https://community.splunk.com/t5/Getting-Data-In/Why-has-Splunk-stopped-indexing-my-files/m-p/254354#M48851 <P>Don't forget to mark as answered <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Thu, 26 Jan 2017 11:34:46 GMT https://community.splunk.com/t5/Getting-Data-In/Why-has-Splunk-stopped-indexing-my-files/m-p/254354#M48851 jplumsdaine22 2017-01-26T11:34:46Z