If you change the index attribute of monitor stanza in inputs.conf, Will log re-capture be done?

[takashiscsk]

If you change the index attribute of monitor stanza in inputs.conf,
Will log re-capture be done?

For example, if you change it as below in inputs.conf

Change before

[monitor: ///work/file.txt]
index = test 0612
sourcetype = sample

After change

[monitor: ///work/file.txt]
index = test 0613
sourcetype = sample

[Ayn]

No, because Splunk instances (including forwarders) use their internal _fishbucket index for keeping track of positions in files they're indexing. You'd have to clean that out one way or another to make Splunk reindex data.

[ddrillic]

Nope, in cases like these, I sometimes drop the forwarder and re-install it. Starting fresh ; -)