Getting Data In

Data no longer being indexed into index

Explorer

set a particular forwarder app and also by filewatch to go to a particular index and it's stopped going into the clustered index.

0 Karma

Esteemed Legend

What changed?

0 Karma

SplunkTrust
SplunkTrust

Hi @ntripp_element,
could you share more information? deployed app, logs that are disappared, architecture, etc....

Ciao.
Giuseppe

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!