Getting Data In

After uploading a new file via Splunk Web, why am I getting "Error: Can't preview source"?

splunkCiti
New Member

Not able to search newly added file.

I am adding new file from:
setting ->Data Inputes -> New

But after uploading any new file, when I press Next, In Set Source type, there is an error reported "Can't preview the source file" and Data is also not getting indexed.
Because of this, I'm not able to perform any search.
However, I was able to add the file and perform a search before, but suddenly what setting is changed i dnt knw.

0 Karma

jmallorquin
Builder

Is the file bigger than 500 mb ?
The preview is limited to 500mb

0 Karma

splunkCiti
New Member

getting this error when i am adding small file also. And file is not indexed also.

0 Karma

splunkCiti
New Member

Even not getting real time data from forwarder also. When i am performing search on logs of forwarder then data till 9/12/15 is displayed .

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...