How to index lost data from a specific date range?

[dantimola]

Hi Splunkers,

I have AD server integrated to our splunk that is indexing Active Directory logs and we've lost data from specific date range, however, logs is active on that date. Is there any way to index that lost AD logs? The dates are July 13-15, 2017 to be specific.

Thanks,
Dan

[sbbadri]

Check below link,

https://answers.splunk.com/answers/72562/how-to-reindex-data-from-a-forwarder.html