Getting Data In

SPECIFIC sourcetypes are not forwarded while everything is forwarded.Splunk Forwarder is showing that log file is emptyline as a WARN message in Splunkd.log as Follow :

akhil36109
New Member

Splunk Forwarder is showing that log file is emptyline as a WARN message in Splunkd.log as Follow :

01-23-2018 20:50:06.116 +0000 WARN CsvLineBreaker - CSV StreamId: 18364207351549900662 has empty line. - data_source="/data/credit/file.tsv", data
_host="Sciloapi", data_sourcetype="ticket_data"

01-30-2018 10:20:04.637 +0000 WARN CsvLineBreaker - CSV StreamId: 7621279048930603185 has empty line. - data_source="/data01/DataExtractor/Data/Ticket_Log/Ticket_Log_20180130.tsv", data_h
ost="Sciloapi", data_sourcetype="ticketlog_data"

But the Actual File is not empty it has Data.
I checked everything the portnumber,metricslog,splunkd
everything is good.
Except those two sourcetypes ,the remaining data is getting forwarded.
The only problem is those TWO specific sourcetypes r not getting forwarded from last 7 days.

what would be the problem??

Please help me !

Tags (1)
0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...