topic Re: unable to get the recent logs - error in Monitoring Splunk

unable to get the recent logs - error

isahu — Mon, 25 Aug 2025 14:55:05 GMT

Unable to get the recent logs for today for an production environment. It is throwing an error stating "ERROR [PropertyMaker] Unknown length unit 'E-15'

How to get the recent logs in splunk? Please help

Re: unable to get the recent logs - error

PickleRick — Mon, 25 Aug 2025 17:29:13 GMT

What product? Logs from where? What exactly are you doing? Where do you get this message?

Re: unable to get the recent logs - error

isahu — Mon, 25 Aug 2025 17:38:03 GMT

I onboarded a new application log in splunk but after onboarding this application I noticed recent logs are missing a day before logs are available but not the recent ones. While checking logs in splunk search head I am getting this error."ERROR [PropertyMaker] Unknown length unit 'E-15'

Re: unable to get the recent logs - error

richgalloway — Mon, 25 Aug 2025 17:44:36 GMT

More details would help us better understand the problem so can offer solutions.

If recent logs are not found in Splunk then try these steps

confirm the application is still running
confirm the Splunk forwarder is still running
If the application overwrites the file then it's possible Splunk thinks it has already indexed the data. In that case, you may need to update the initCrcLenth setting in inputs.conf.