https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356199#M65057 <P>can you hlep me in two cases if it was saving and not saving flies ?</P> Mon, 23 Apr 2018 16:12:05 GMT splunker969 2018-04-23T16:12:05Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356195#M65053 <P>Please hlep me how I can reindex data which is coming from syslog server to splunk?</P> <P>Thanks ,<BR /> splunker969</P> Mon, 23 Apr 2018 15:30:30 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356195#M65053 splunker969 2018-04-23T15:30:30Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356196#M65054 <P>What's your use-case here? Do you want to re-index (need more information on what you mean here) OR re-parse?</P> Mon, 23 Apr 2018 15:47:18 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356196#M65054 somesoni2 2018-04-23T15:47:18Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356197#M65055 <P>customer is sending data to our syslog server where the server is acting as uf also .Since he came back and asking on last tuesday the data was missing from hosts and I am looking how can i reindex data from last tuesday .Now at present data is coimng correctly .</P> Mon, 23 Apr 2018 15:53:48 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356197#M65055 splunker969 2018-04-23T15:53:48Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356198#M65056 <P>So is your syslog saving the files somewhere (probably where UF is monitoring it)? </P> Mon, 23 Apr 2018 16:05:03 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356198#M65056 somesoni2 2018-04-23T16:05:03Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356199#M65057 <P>can you hlep me in two cases if it was saving and not saving flies ?</P> Mon, 23 Apr 2018 16:12:05 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356199#M65057 splunker969 2018-04-23T16:12:05Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356200#M65058 <P>I found that we dont have those files in our syslog server .Can you help me how to re index missing data ?</P> Mon, 23 Apr 2018 16:50:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356200#M65058 splunker969 2018-04-23T16:50:40Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356201#M65059 <P>Well, you'd have to ask them to send the data again (if you're not saving them and haven't ingested in Splunk, they are lost). You can ask them to send it to same syslog port, so that it's processed the same way.</P> Mon, 23 Apr 2018 18:10:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356201#M65059 somesoni2 2018-04-23T18:10:51Z https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356202#M65060 <P>Thanks somesoni2</P> Mon, 23 Apr 2018 18:48:54 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-which-is-coming-from-syslog-server-to-splunk/m-p/356202#M65060 splunker969 2018-04-23T18:48:54Z