https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-data-in-to-splunk-with-different-source-type/m-p/455077#M95016 <P>@vikram1583 you can use collect command to get data from old sourcetype to new sourcetype using a time_range where the old data lies</P> Tue, 02 Jul 2019 19:38:28 GMT Vijeta 2019-07-02T19:38:28Z https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-data-in-to-splunk-with-different-source-type/m-p/455076#M95015 <P>I am using universal forwarder I indexed data into Splunk with a source type now I want to re-index same data with different source type but I am getting current data only how can I get old data ?</P> Tue, 02 Jul 2019 19:28:54 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-data-in-to-splunk-with-different-source-type/m-p/455076#M95015 vikram1583 2019-07-02T19:28:54Z https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-data-in-to-splunk-with-different-source-type/m-p/455077#M95016 <P>@vikram1583 you can use collect command to get data from old sourcetype to new sourcetype using a time_range where the old data lies</P> Tue, 02 Jul 2019 19:38:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-data-in-to-splunk-with-different-source-type/m-p/455077#M95016 Vijeta 2019-07-02T19:38:28Z https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-data-in-to-splunk-with-different-source-type/m-p/455078#M95017 <P>One option is to update your inputs.conf with the new sourcetype name under the monitor stanza and also add the following and restart the forwarder<BR /> crcSalt = reindex</P> <P>Really any unique value for the crcSalt will work<BR /> You should get all data reindexed for that monitor rule</P> <P>One other option would be to remove the fish bucket on the forwarder and restart however that would reindex all sourcetypes on the host</P> Tue, 02 Jul 2019 22:20:12 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-re-index-data-in-to-splunk-with-different-source-type/m-p/455078#M95017 bandit 2019-07-02T22:20:12Z