Getting Data In

After uploading a new file via Splunk Web, why am I getting "Error: Can't preview source"?

splunkCiti
New Member

Not able to search newly added file.

I am adding new file from:
setting ->Data Inputes -> New

But after uploading any new file, when I press Next, In Set Source type, there is an error reported "Can't preview the source file" and Data is also not getting indexed.
Because of this, I'm not able to perform any search.
However, I was able to add the file and perform a search before, but suddenly what setting is changed i dnt knw.

0 Karma

jmallorquin
Builder

Is the file bigger than 500 mb ?
The preview is limited to 500mb

0 Karma

splunkCiti
New Member

getting this error when i am adding small file also. And file is not indexed also.

0 Karma

splunkCiti
New Member

Even not getting real time data from forwarder also. When i am performing search on logs of forwarder then data till 9/12/15 is displayed .

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...