Archive2

Rawdata may be corrupt but fsck scan doesn't show any corrupted buckets

Communicator

Running the Splunk fsck scan and did not get bucket flagged as corrupted..!
But tried fsck repair and got :
Error reading compressed journal while streaming

So I tried cmd exporttool after reading some Splunk answers and now I get below error
JournalSliceDirectory: Cannot seek to rawdata offset 2596784560

What exactly is the solution here and how can I fix it?
Why doesn't fsck scan show it as corrupted?

0 Karma
Reply