Data Index Question - Data Also On Indexer Not Indexing

[A4orce84]

Hello Everyone,

I currently have an indexer (one box) which also has data that I want to index. I specified the location to index in my specific bundle, but the data is still not flowing through. I see a lot of errors around crcSalt, as you can see here:

Screenshot:

If anyone could please help me sort this out and get the data to be indexed into Splunk, it would be greatly appreciated! If you need any additional information, please let me know!

Thanks,

--Asif Ahmad

[MarioM]

did you try to use crcSalt in your inputs.conf (more info below and similar question in answers 😞

crcSalt = <string>
* Use this setting to force Splunk to consume files that have matching CRCs (cyclic redundancy checks). (Splunk only 
  performs CRC checks against the first few lines of a file. This behavior prevents Splunk from indexing the same 
  file twice, even though you may have renamed it -- as, for example, with rolling log files. However, because the 
  CRC is based on only the first few lines of the file, it is possible for legitimately different files to have 
  matching CRCs, particularly if they have identical headers.)
* If set, <string> is added to the CRC.
* If set to the literal string <SOURCE> (including the angle brackets), the full directory path to the source file 
  is added to the CRC. This ensures that each file being monitored has a unique CRC.   When crcSalt is invoked, 
  it is usually set to <SOURCE>.
* Be cautious about using this attribute with rolling log files; it could lead to the log file being re-indexed 
  after it has rolled. 
* Defaults to empty.

[jbsplunk]

your screen print didn't make it over. Could you let us know which version of Splunk you're using and the way you've configured the specific inputs you'd like to read the files you want to index?