I have a collection of log files (InDesign Server logs) that I'm indexing with the following inputs.conf settings: [monitor:///path/to/files/*.log] disabled = 0 crcSalt = followTail = 0 host = myhost index = myindex Everything seems to be OK, but then after some interval, I start to see these messages in splunkd.log: 03-16-2012 15:42:08.152 -0400 INFO WatchedFile - Checksum for seekptr didn't match, will re-read entire file='/path/to/files/indesignserver.log' It's causing many duplicate entries in my index as the same files keep getting re-indexed. Does anybody have any thoughts on why the seekptr checksum would fail? ... View more