https://community.splunk.com/t5/Getting-Data-In/Force-Reload-of-Files/m-p/174720#M98272 <P>You need to clean the fishbucket (you can find how to do it here at splunk answers) or modify the header of the file, to make splunk think is a new one not indexed yet.</P> <P>Regards</P> Wed, 11 Dec 2013 13:42:10 GMT gfuente 2013-12-11T13:42:10Z https://community.splunk.com/t5/Getting-Data-In/Force-Reload-of-Files/m-p/174719#M98271 <P>I am interested in reloading some files into Splunk however Splunk is (rightfully) ignoring the files as they havee already been loaded. Is there a way to force Splunk to reload these files?</P> Wed, 11 Dec 2013 13:34:17 GMT https://community.splunk.com/t5/Getting-Data-In/Force-Reload-of-Files/m-p/174719#M98271 andrewkenth 2013-12-11T13:34:17Z https://community.splunk.com/t5/Getting-Data-In/Force-Reload-of-Files/m-p/174720#M98272 <P>You need to clean the fishbucket (you can find how to do it here at splunk answers) or modify the header of the file, to make splunk think is a new one not indexed yet.</P> <P>Regards</P> Wed, 11 Dec 2013 13:42:10 GMT https://community.splunk.com/t5/Getting-Data-In/Force-Reload-of-Files/m-p/174720#M98272 gfuente 2013-12-11T13:42:10Z https://community.splunk.com/t5/Getting-Data-In/Force-Reload-of-Files/m-p/174721#M98273 <P>I was able to do this by using the following commands:</P> <P>splunk stop<BR /> splunk clean eventdata _fishbucket -index <INDEXNAME><BR /> splunk clean eventdata -index <INDEXNAME> </INDEXNAME></INDEXNAME></P> <P>Then I restart Splunk and moved the files I wanted to reload into monitored directories.</P> Wed, 11 Dec 2013 14:38:24 GMT https://community.splunk.com/t5/Getting-Data-In/Force-Reload-of-Files/m-p/174721#M98273 andrewkenth 2013-12-11T14:38:24Z