Hello,
Could you please help me to resolve the below issue which I am getting while running the command ./splunk list inputstatus |less.
file position = 18565725
file size = 17724895
parent = /mnt/data/log/vpn/*/*.log
percent = 104.74
type = ignored (modtime fell behind window of 18000 seconds ago).
Thanks in advance for the help!
The issue is resolved now.
In inputs.conf file which is configured in our environment, there is one line "ignoreOlderThan = 5h" mentioned in the monitoring path which is causing this issue.
Now I have removed that line from the monitoring path and the issue stands resolved now.