https://community.splunk.com/t5/Monitoring-Splunk/Local-data-added-in-splunk-server-getting-deleted/m-p/409203#M6545 <P>Hi SathyaNarayanan,<BR /> check the retention of your index and verify if events are in the retention period, maybe they are outside!</P> <P>Bye.<BR /> Giuseppe</P> Thu, 22 Nov 2018 12:15:04 GMT gcusello 2018-11-22T12:15:04Z https://community.splunk.com/t5/Monitoring-Splunk/Local-data-added-in-splunk-server-getting-deleted/m-p/409202#M6544 <P>Hi,</P> <P>I have uploaded 15 csv files in splunk from local by Add data option and view in the search. </P> <P>After some days in 15 files, 4 files got deleted, I re-uploaded the files once again but still it got deleted in few days.</P> <P>I couldn't find the reason. i searched whether the data got deleted in _audit but i couldn't find anything.</P> <P>Thanks in Advance</P> Thu, 22 Nov 2018 06:32:32 GMT https://community.splunk.com/t5/Monitoring-Splunk/Local-data-added-in-splunk-server-getting-deleted/m-p/409202#M6544 SathyaNarayanan 2018-11-22T06:32:32Z https://community.splunk.com/t5/Monitoring-Splunk/Local-data-added-in-splunk-server-getting-deleted/m-p/409203#M6545 <P>Hi SathyaNarayanan,<BR /> check the retention of your index and verify if events are in the retention period, maybe they are outside!</P> <P>Bye.<BR /> Giuseppe</P> Thu, 22 Nov 2018 12:15:04 GMT https://community.splunk.com/t5/Monitoring-Splunk/Local-data-added-in-splunk-server-getting-deleted/m-p/409203#M6545 gcusello 2018-11-22T12:15:04Z https://community.splunk.com/t5/Monitoring-Splunk/Local-data-added-in-splunk-server-getting-deleted/m-p/409204#M6546 <P>I checked that too, it is five years. if the retention period was problem other csv also should have been deleted</P> Thu, 22 Nov 2018 12:20:53 GMT https://community.splunk.com/t5/Monitoring-Splunk/Local-data-added-in-splunk-server-getting-deleted/m-p/409204#M6546 SathyaNarayanan 2018-11-22T12:20:53Z