I have indexed a file on Splunk but when I start searching, the file cannot be found. Do you know why it happened? For my last problem, it has been solved. Currently I am having a problem where the indexed file cannot be found.
As you can see, I have indexed the /home/csaops/csasec/*.txt
But when I searched for it, no result
Do you guys know why this happened? It is not a binary data. It is a health check data
Hi
have you check that this file is readable by UF/Splunk user on filesystem level?
Have you check that this file haven't been splunk in some "wrong" place?
You can check status of this file on cmd line with command
splunk list inputstatus
r. Ismo
Hi
have you check that this file is readable by UF/Splunk user on filesystem level?
Have you check that this file haven't been splunk in some "wrong" place?
You can check status of this file on cmd line with command
splunk list inputstatus
r. Ismo