https://community.splunk.com/t5/Getting-Data-In/New-index-not-working/m-p/127913#M97739 <P>I have created a new index and when i search that in search head its not working.</P> <H2>inputs.conf</H2> <P>[monitor:///apps/splunk/var/run/splunk/fprsbatch.csv]<BR /> host = vc2cmmkb019694n.fmr.com<BR /> source = bhav<BR /> sourcetype = bhav_stype<BR /> index = transactions</P> <H2>props.conf</H2> <P>[source::bhav]<BR /> REPORT-transactions = fprsbatch_csv<BR /> MAX_DAYS_AGO = 10000<BR /> SHOULD_LINEMERGE = False</P> <H2>transforms.conf</H2> <P>[fprsbatch_csv]<BR /> DELIMS = ","<BR /> FIELDS = "ODATE","0TIME","TRANS","AMOUNT"</P> <P>I have restarted the server once (its a free version)</P> Mon, 28 Sep 2020 19:25:39 GMT iamniks 2020-09-28T19:25:39Z https://community.splunk.com/t5/Getting-Data-In/New-index-not-working/m-p/127913#M97739 <P>I have created a new index and when i search that in search head its not working.</P> <H2>inputs.conf</H2> <P>[monitor:///apps/splunk/var/run/splunk/fprsbatch.csv]<BR /> host = vc2cmmkb019694n.fmr.com<BR /> source = bhav<BR /> sourcetype = bhav_stype<BR /> index = transactions</P> <H2>props.conf</H2> <P>[source::bhav]<BR /> REPORT-transactions = fprsbatch_csv<BR /> MAX_DAYS_AGO = 10000<BR /> SHOULD_LINEMERGE = False</P> <H2>transforms.conf</H2> <P>[fprsbatch_csv]<BR /> DELIMS = ","<BR /> FIELDS = "ODATE","0TIME","TRANS","AMOUNT"</P> <P>I have restarted the server once (its a free version)</P> Mon, 28 Sep 2020 19:25:39 GMT https://community.splunk.com/t5/Getting-Data-In/New-index-not-working/m-p/127913#M97739 iamniks 2020-09-28T19:25:39Z https://community.splunk.com/t5/Getting-Data-In/New-index-not-working/m-p/127914#M97740 <P>FOund out the issue. there were ^M chars in the input file</P> Mon, 06 Apr 2015 14:32:48 GMT https://community.splunk.com/t5/Getting-Data-In/New-index-not-working/m-p/127914#M97740 iamniks 2015-04-06T14:32:48Z