https://community.splunk.com/t5/Getting-Data-In/initcrc-error/m-p/446382#M77645 <P>hi,</P> <P>I have a lot of error when splunk try to decrompess .gz files</P> <P>my inputs.conf : </P> <PRE><CODE>[monitor://D:\xxxxxx\] source = file.bluecoat sourcetype = bluecoat:proxysg:access:file disabled = false index=proxy current_only=0 </CODE></PRE> <P>Error Message</P> <PRE><CODE>ERROR ArchiveContext - From archive='D:\SFTP\Logs_proxy\FR000_ALOG_EU-PAR-BC101_inet_20190130_125039_UTC.log.gz': Decompression error DEBUG ArchiveProcessor - Found no initcrc match for this stream, will re-read entire file. DEBUG ArchiveProcessor - This archive stream's initcrc=0x7154d22c05d963eb. </CODE></PRE> <P>I don't have a solution and you ?</P> <P>Thank you in advance</P> Wed, 06 Feb 2019 06:57:25 GMT rjulie 2019-02-06T06:57:25Z https://community.splunk.com/t5/Getting-Data-In/initcrc-error/m-p/446382#M77645 <P>hi,</P> <P>I have a lot of error when splunk try to decrompess .gz files</P> <P>my inputs.conf : </P> <PRE><CODE>[monitor://D:\xxxxxx\] source = file.bluecoat sourcetype = bluecoat:proxysg:access:file disabled = false index=proxy current_only=0 </CODE></PRE> <P>Error Message</P> <PRE><CODE>ERROR ArchiveContext - From archive='D:\SFTP\Logs_proxy\FR000_ALOG_EU-PAR-BC101_inet_20190130_125039_UTC.log.gz': Decompression error DEBUG ArchiveProcessor - Found no initcrc match for this stream, will re-read entire file. DEBUG ArchiveProcessor - This archive stream's initcrc=0x7154d22c05d963eb. </CODE></PRE> <P>I don't have a solution and you ?</P> <P>Thank you in advance</P> Wed, 06 Feb 2019 06:57:25 GMT https://community.splunk.com/t5/Getting-Data-In/initcrc-error/m-p/446382#M77645 rjulie 2019-02-06T06:57:25Z https://community.splunk.com/t5/Getting-Data-In/initcrc-error/m-p/446383#M77646 <P>I would open a support case.</P> Fri, 08 Feb 2019 17:40:25 GMT https://community.splunk.com/t5/Getting-Data-In/initcrc-error/m-p/446383#M77646 woodcock 2019-02-08T17:40:25Z