Getting Data In
Highlighted

All indexed data from earlier than yesterday disappeared.

Builder

I was hoping someone could help me here. We had been ingesting data to an index just fine for weeks, Then all of the sudden all data from yesterday and earlier is missing. index is currently working fine since that point in time.

What should I be checking?

Tags (2)
0 Karma
Highlighted

Re: All indexed data from earlier than yesterday disappeared.

Splunk Employee
Splunk Employee

There is no reason that this would ever happen without some sort of outside influence. Some places that I would look:

Good luck!

0 Karma