unable to get the recent logs - error

[isahu]

Unable to get the recent logs for today for an production environment. It is throwing an error stating "ERROR [PropertyMaker] Unknown length unit 'E-15'

How to get the recent logs in splunk? Please help

[isahu]

I onboarded a new application log in splunk but after onboarding this application I noticed recent logs are missing a day before logs are available but not the recent ones. While checking logs in splunk search head I am getting this error."ERROR [PropertyMaker] Unknown length unit 'E-15'

[richgalloway]

More details would help us better understand the problem so can offer solutions.

If recent logs are not found in Splunk then try these steps

• confirm the application is still running
• confirm the Splunk forwarder is still running
• If the application overwrites the file then it's possible Splunk thinks it has already indexed the data.  In that case, you may need to update the initCrcLenth setting in inputs.conf.

[PickleRick]

What product? Logs from where? What exactly are you doing? Where do you get this message?