Splunk skipping indexing of Websphere logs

[asherinb]

We have a case where 4 log files are being monitored.
Daily the log file is rolled to a back up and truncated at the end of the day.

[monitor:///projects/Agent/runtime/logs/websphere1.log]
index=nss
sourcetype=NSS
[monitor:///projects/Agent/runtime/logs/websphere2.log]
index=rts
sourcetype=NSS
[monitor:///projects/Agent/runtime/logs/websphere3.log]
index=nss
sourcetype=NSS
[monitor:///projects/Agent/runtime/logs/websphere4.log]
index=nss

One file or the other gest skipped daily as the data appears same to Splunk.

I tried changing intCRClength to a higher value (around 750 bytes) but that doesnt seem to help either.

Please help in fixing this issue.

Thanks in advance

[jeremiahc4 · Accepted solution]

Have you tried adding crcSalt= to your inputs.conf?

[asherinb]

thanks, adding crcsalt= worked