When any new data is uploaded to Splunk to review before index, why does the preview page comes up blank and no sample of data is generated?

[mussab]

When I upload any new data to Splunk to review before the index, the preview page is blank and no sample of data is generated

Splunk Version: 7.1.2
Lab environment

[mussab · Accepted solution]

The issue has been fixed; when I checked the log files I noticed below error

08-18-2018 18:12:32.508 +0300 WARN CacheManager - Last run failed to evict requested bytes. Performing eviction in urgent mode for path=/opt/splunk/var/lib/splunk/audit/db

This error was due to the minimum space in index (I am using lab environment), I changed "Pause indexing if free disk space (in MB) falls below" setting under server setting to match my free space... and everything work fine now

[horsefez]

@mussab please tell us more about the sample data you are using