splunk

[loknath]

Hello Everyone

this is how iam getting error massage , while forwarding data from universal forwarder to indexer , 

This is the i got from error logs , Iam not able to understand : can anyone help me in this >

01-17-2025 06:32:15.605 +0000 INFO TailReader [1654 tailreader0] - Batch input finished reading file='/opt/splunkforwarder/var/spool/splunk/tracker.log'

[kiran_panchavat]

@loknath  The TailReader in Splunk is a component responsible for monitoring and collecting data written to the end of a file being monitored. It's part of the File Monitor Input feature, which allows Splunk to tail files and continuously read new data as it is appended to the file.

kiran_panchavat_0-1737104311545.png

[isoutamo]

This is not an error message. It just informs you that this file has read.
Is this totally new splunk environment or just a new uf which haven’t sent logs before to splunk.