Hi All,
My file is not reindexing though I used below settings in my inputs configuration file . File is very small (300 char) and wont change often, want file to reindex daily . Kindly help .
crcSalt = <SOURCE>
initCrcLength = 256
If the file doesn't change then Splunk won't re-index it. You'll have to delete the fishbucket to force Splunk to re-index the file.
splunk cmd btprobe -d /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db --file <small file> --reset