Getting Data In

Logs Not Being Indexed

alexspunkshell
Contributor

Hi All,

I have 10 index.  But in1 index logs were not being indexed frequently.

Restarting HF fixing this issue for few days. And again same issue persist. How to find root cause of this issue and fix this permanently.

@isoutamo @saravanan90 @thambisetty @ITWhisperer @gcusello @bowesmana   @to4kawa 

 

Labels (3)
Tags (2)
0 Karma

alexspunkshell
Contributor

@thambisetty  Input is through monitor from Forwarder.

In splunkd.log i can see only recent logs. I want to find rca in yesterday's log. Can u help here?

0 Karma

thambisetty
SplunkTrust
SplunkTrust

@alexspunkshell 

what kind of input are you referring above. is that monitor or network or script?

————————————
If this helps, give a like below.
0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...