"Cannot seek to rawdata offset 0" running a search in Splunk Web after upgrading Splunk Enterprise from 6.4.2 to 6.5.1

[leo_zhao]

When I upgrade Splunk from 6.4.2 to 6.5.1 and search in Splunk Web, then get error:

JournalSliceDirectory: Cannot seek to rawdata offset 0, path="/opt/splunk/var/lib/splunk/defaultdb/db/db_1480493313_1480491958_8/rawdata", why?

[dantimola]

This might help

https://answers.splunk.com/answers/389363/getting-error-streamed-search-execute-failed-becau.html

[abycemt]

I have this exact issue after upgrading to 6.5.1 as well. It only happens on searches over 30 days. My install is on a single instance centos server.