How can I resolve Splunk input offset?

[joe06031990]

Hi,

I am onboarding the /var/log/secure path and i am getting the bellow about offset 

INFO WatchedFile

/path/to/file.log

Will begin reading at offset=253 for file

Just wondered what I could do to resolve this?

Thanks,

Joe

[richgalloway · Accepted solution]

There is nothing you need to do.  The message is informational and is just Splunk telling you what it is doing.

[joe06031990]

Hi, I have two servers with identical server classes and apps one has onboard /var/log/secure and one has not, the one that has not has that message about the offset but the one which has doesn't have the offset message.