Getting Data In

After uploading a new file via Splunk Web, why am I getting "Error: Can't preview source"?

splunkCiti
New Member

Not able to search newly added file.

I am adding new file from:
setting ->Data Inputes -> New

But after uploading any new file, when I press Next, In Set Source type, there is an error reported "Can't preview the source file" and Data is also not getting indexed.
Because of this, I'm not able to perform any search.
However, I was able to add the file and perform a search before, but suddenly what setting is changed i dnt knw.

0 Karma

jmallorquin
Builder

Is the file bigger than 500 mb ?
The preview is limited to 500mb

0 Karma

splunkCiti
New Member

getting this error when i am adding small file also. And file is not indexed also.

0 Karma

splunkCiti
New Member

Even not getting real time data from forwarder also. When i am performing search on logs of forwarder then data till 9/12/15 is displayed .

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...