I indexed data from a local directory. All of them are Web Access Logs so I set the sourcetype to access_combined.
As I run my search (I'm only searching for the source), I get 0 events in return.
I once had the same source indexed but deleted it. I deleted the indexed data and the data source.
The data input recognizes the 9 files that the directory contains but the search doesn't find events.
I don't know why and have no idea what to do.
I have already restarted Splunk and deleted the indexed data and the data input but nothing works.
