Splunk Search

Search shows 0 events

robin272
Engager

I indexed data from a local directory. All of them are Web Access Logs so I set the sourcetype to access_combined.
As I run my search (I'm only searching for the source), I get 0 events in return.
I once had the same source indexed but deleted it. I deleted the indexed data and the data source.
The data input recognizes the 9 files that the directory contains but the search doesn't find events.
I don't know why and have no idea what to do.
I have already restarted Splunk and deleted the indexed data and the data input but nothing works.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...