Indexing

[Azwaliyana]

I have indexed a file on Splunk but when I start searching, the file cannot be found. Do you know why it happened? For my last problem, it has been solved. Currently I am having a problem where the indexed file cannot be found.

As you can see, I have indexed the /home/csaops/csasec/*.txt

But when I searched for it, no result

Do you guys know why this happened? It is not a binary data. It is a health check data

[isoutamo · Accepted solution]

Hi

have you check that this file is readable by UF/Splunk user on filesystem level?

Have you check that this file haven't been splunk in some "wrong" place?

You can check status of this file on cmd line with command

splunk list inputstatus

 r. Ismo