Always start with splunk docs; see here: https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Cantfinddata ... View more

If you search for index=* and put in your source=*your_file , what do you see? Do you see maybe a typo in the index name or even the index main? If the latter, the config is not working and using the default index. Skalli ... View more