topic Logs Not Being Indexed in Getting Data In

Logs Not Being Indexed

alexspunkshell — Thu, 21 Jan 2021 04:46:55 GMT

Hi All,

I have 10 index. But in1 index logs were not being indexed frequently.

Restarting HF fixing this issue for few days. And again same issue persist. How to find root cause of this issue and fix this permanently.

thambisetty — Thu, 21 Jan 2021 09:08:38 GMT

what kind of input are you referring above. is that monitor or network or script?

alexspunkshell — Thu, 21 Jan 2021 09:49:14 GMT

@thambisetty Input is through monitor from Forwarder.

In splunkd.log i can see only recent logs. I want to find rca in yesterday's log. Can u help here?