After changing the retention date on the indexes, why has the Splunk App for Jenkins stopped showing results after this weekend?

[erosch]

Splunk App for Jenkins was showing everything correctly last week (all graphs, dropdowns, test results showed correctly). Today, there are no results in the graphs and I cannot select any job, no test results, Jenkins health, or Jenkins slave tabs.

Only 2 things works today:
1. In all the tabs (views), Jenkins Master field can auto-complete with my Jenkins master hostname. But after selecting, I can't select jobs
2. Audit Trail >Jenkins Config Contents

The Jenkins plugin seems to be working correctly because I can see today's data when I do a search such as:
Example 1:

index=jenkins_statistics

This is returning realtime events with event_tag: slave and event_tag: queue, they have sourcetype: json:jenkins for all events
Example 2:

index=jenkins

This is returning realtime events with event_tag: build_report, all events have sourcetype: json:jenkins

Only changed I remember doing on Friday was the retention days on the indexes...
I changed the indexes (jenkins, jenkins_console, jenkins_statistics, jenkins_artifacts) to retention of 1 day on Friday. All data before Friday is gone (today is Monday, it's been 3 days) which is expected, but I am expecting today's data to show in the app, but it's not.

I am using Splunk Cloud
Splunk App for Jenkins, App Version 1.0.2, App Build 1
Jenkins plugin 1.3.1

[erosch · Accepted solution]

Data sent to splunk was good. So I just asked support to reinstall the app and now everything works again.

[txiao_splunk]

Most Query in Splunk App for Jenkins is not Realtime search, can you try non-realtime search using
index=jenkins* earliest=-1d

If the data is not expected, you may need check index config | rest /services/data/indexes