https://community.splunk.com/t5/Splunk-Search/File-too-small-but-not/m-p/69916#M180585 <P>Hi,</P> <P>Same issue here.<BR /> Same error message, on a file that is 4Go+.</P> <P>Any idea ?</P> <P>Running splunk 4.3.2</P> Wed, 06 Feb 2013 18:22:44 GMT metalon 2013-02-06T18:22:44Z https://community.splunk.com/t5/Splunk-Search/File-too-small-but-not/m-p/69915#M180584 <P>I have these info messages popping up in my splunk install every couple of seconds</P> <PRE><CODE>09-25-2012 09:37:40.378 -0500 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file='/logging/syslog-ng/everything'. 09-25-2012 09:37:40.378 -0500 INFO WatchedFile - Will begin reading at offset=0 for file='/logging/syslog-ng/everything'. </CODE></PRE> <P>But the file that it is monitoring is growing nicely. Sooooo why?</P> <P>Is it really re-reading the file every couple of seconds? It's a huge file; 14 gig+</P> <P>Running splunk 4.3.4.</P> Tue, 25 Sep 2012 14:42:31 GMT https://community.splunk.com/t5/Splunk-Search/File-too-small-but-not/m-p/69915#M180584 caphrim007 2012-09-25T14:42:31Z https://community.splunk.com/t5/Splunk-Search/File-too-small-but-not/m-p/69916#M180585 <P>Hi,</P> <P>Same issue here.<BR /> Same error message, on a file that is 4Go+.</P> <P>Any idea ?</P> <P>Running splunk 4.3.2</P> Wed, 06 Feb 2013 18:22:44 GMT https://community.splunk.com/t5/Splunk-Search/File-too-small-but-not/m-p/69916#M180585 metalon 2013-02-06T18:22:44Z