Getting Data In

After uploading a new file via Splunk Web, why am I getting "Error: Can't preview source"?

splunkCiti
New Member

Not able to search newly added file.

I am adding new file from:
setting ->Data Inputes -> New

But after uploading any new file, when I press Next, In Set Source type, there is an error reported "Can't preview the source file" and Data is also not getting indexed.
Because of this, I'm not able to perform any search.
However, I was able to add the file and perform a search before, but suddenly what setting is changed i dnt knw.

0 Karma

jmallorquin
Builder

Is the file bigger than 500 mb ?
The preview is limited to 500mb

0 Karma

splunkCiti
New Member

getting this error when i am adding small file also. And file is not indexed also.

0 Karma

splunkCiti
New Member

Even not getting real time data from forwarder also. When i am performing search on logs of forwarder then data till 9/12/15 is displayed .

0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Community Content Calendar, October Edition

Welcome to the October edition of our Community Spotlight! The Splunk Community is a treasure trove of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...