Getting error modtime fell behind window of 18000 seconds ago when checking through command "./splunk list inputstatus |less"

[sahilgph]

Hello,

Could you please help me to resolve the below issue which I am getting while running the command ./splunk list inputstatus |less.

            file position = 18565725
            file size = 17724895
            parent = /mnt/data/log/vpn/*/*.log
            percent = 104.74
            type = ignored (modtime fell behind window of 18000 seconds ago).

Thanks in advance for the help!

[sahilgph]

The issue is resolved now.

In inputs.conf file which is configured in our environment, there is one line "ignoreOlderThan = 5h" mentioned in the monitoring path which is causing this issue.

Now I have removed that line from the monitoring path and the issue stands resolved now.