HI friends,
I am trying to Index some XML (size ~ 2-3MB) using SPLUNK. I've setup a data input to continuously monitor the file location. However SPLUNK fails to index/parse any of the XML files. Following error is reported in SPLUNKD logs -
ERROR TailReader - File will not be read, is too small to match seekptr checksum (file=\\share\Integration\partners\gateway\SD-882_834_990ABDX_20160219_085743.xml). Last time we saw this initcrc, filename was different. You may wish to use larger initCrcLen for this sourcetype, or a CRC salt on this source.
I am not sure about the reason. Did anyone face this issue ?
↧