I have a problem that changes in the monitored CSV files are not detected and indexed. The file name is not changed, but the file is always overwritten and updated. The header of the CSV file has 207 bytes, so I've add initCrcLength = 512 on inputs.conf. I guess it doesn't make sense since the file name doesn't change, but I also add crcSalt = <SOURCE>. Any help would be appreciated.
Note: In my environment, I have built a Splunk server in AWS and monitor CSV files stored in EBS.