Hi ,
My file got indexed. Unfortunately both the actual file and the indexed data got deleted but we have backup for indexed data.
We are trying to retrieve the raw data from indexed data backup and ingest the file again in to Splunk. How to retrieve the actual data from indexed data?
↧