you can use crcSalt=RandomString but this will only make it reindex files that have already been indexed, and it will only index them one new time.
What are you trying to do?
Most people want to use
crcSalt=<SOURCE> and use the "Monitor" stanzas in inputs.conf.
I guess if you wanted to, you could greatly reduce the size of your fishbucket aka btree:
filetrackingdbthresholdmb = 1
The above would cause there to be a very small fishbucket (which contains the CRCs), and so splunk would fill the fishbucket rapidly and then rotate the data within... effectively "forgetting" very quickly that it had indexed a file.
Got it, do not have much text about Salt crc, so I was confused.
It is possible to create a crc without being the first characters and not the source?
We're having trouble in this part.
Thank you, again.