Getting Data In

After uploading a new file via Splunk Web, why am I getting "Error: Can't preview source"?

splunkCiti
New Member

Not able to search newly added file.

I am adding new file from:
setting ->Data Inputes -> New

But after uploading any new file, when I press Next, In Set Source type, there is an error reported "Can't preview the source file" and Data is also not getting indexed.
Because of this, I'm not able to perform any search.
However, I was able to add the file and perform a search before, but suddenly what setting is changed i dnt knw.

0 Karma

jmallorquin
Builder

Is the file bigger than 500 mb ?
The preview is limited to 500mb

0 Karma

splunkCiti
New Member

getting this error when i am adding small file also. And file is not indexed also.

0 Karma

splunkCiti
New Member

Even not getting real time data from forwarder also. When i am performing search on logs of forwarder then data till 9/12/15 is displayed .

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...