https://community.splunk.com/t5/Getting-Data-In/REST-API-Data-visible-post-Splunk-restart/m-p/399634#M71183 <P>Hey Splunker,<BR /> We have configured many Rest APIs in Splunk search head, to monitor.<BR /> Several times it happened, we unable to receive the data, to view the data on Splunk Search Head.<BR /> While once I restart Splunk services on Search Head, the whole data is visible, data of the missing period is also available. Shocking!</P> <P>Now, since I have a limitation of access, I can only access the search head. I would like to know the possible scenarios with the respective teams to check on, why this is happening?</P> <P>1) Whether the issue has happened between Search Head to Indexer or Indexer to Search Head?<BR /> 2) Where can we find the traits the logs, for this anomaly, I didn't face any warning neither on UI nor splunkd.log?</P> Thu, 30 May 2019 08:56:10 GMT sarvesh_11 2019-05-30T08:56:10Z https://community.splunk.com/t5/Getting-Data-In/REST-API-Data-visible-post-Splunk-restart/m-p/399634#M71183 <P>Hey Splunker,<BR /> We have configured many Rest APIs in Splunk search head, to monitor.<BR /> Several times it happened, we unable to receive the data, to view the data on Splunk Search Head.<BR /> While once I restart Splunk services on Search Head, the whole data is visible, data of the missing period is also available. Shocking!</P> <P>Now, since I have a limitation of access, I can only access the search head. I would like to know the possible scenarios with the respective teams to check on, why this is happening?</P> <P>1) Whether the issue has happened between Search Head to Indexer or Indexer to Search Head?<BR /> 2) Where can we find the traits the logs, for this anomaly, I didn't face any warning neither on UI nor splunkd.log?</P> Thu, 30 May 2019 08:56:10 GMT https://community.splunk.com/t5/Getting-Data-In/REST-API-Data-visible-post-Splunk-restart/m-p/399634#M71183 sarvesh_11 2019-05-30T08:56:10Z