I don't see 3-4 log files missing while searching on Searchhead. Is there any command to check if Splunk has already read the file on Universal forwarder. I'm running on older universal forwarder version 6.1. I can't use inputstatus command.
Hi,
We can try below URL in the browser to check the same in an older version of Universal Forwarder below 6.3:
https://your-splunk-server:8089/services/admin/inputstatus/TailingProcessor:FileStatus
