Getting Data In

Splunk Missing Indexed Content Files From FTP Server

mathiasy123
Path Finder

Greetings,

I have a problem with my Splunk index. My Splunk indexed data from a file log in FTP Server using FTP Pull Add-On.

But the problem is, there is missing file content that my Splunk index did not index.

For example:

file_name.log has some 6 content (6 rows data)

But my Splunk did not index all of 6 content on that file, resulting only 5 content (5 rows data) indexed. So, in my Splunk, there are 5 events produced.

 

My question is:

1. How to track my Splunk index, when indexing the data with all details, like the file content, the time-indexed, and etc? 

2. How to fix my Splunk index miss some of the file content when the index happens?

 

Thanks in advanced

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...