Why does Splunk Web sometimes not show the event data for a search unless I restart?

[boopaljothi]

Splunk Web doesn't show the events at times. If I restart and log in, it will show the events, but after some time, events are not displayed. It shows total events, but the details are not displayed

Also, the main page doesn't show the summary of events indexed. Usually it should total events and indexes.

What could be the problem? This leads to me restarting splunkd service every time.

[sundareshr]

What do you see in the splunk logs?

http://docs.splunk.com/Documentation/Splunk/6.2.0/Troubleshooting/WhatSplunklogsaboutitself

[boopaljothi]

there are multiple logs in C:\Program Files\Splunk\var\log\splunk. is there any particular log that you are looking for?

[sundareshr]

start with splunkd.... see if anything sticks out.

[boopaljothi]

splunkd didnt show anything odd