When I upgrade Splunk from 6.4.2 to 6.5.1 and search in Splunk Web, then get error:
JournalSliceDirectory: Cannot seek to rawdata offset 0, path="/opt/splunk/var/lib/splunk/defaultdb/db/db_1480493313_1480491958_8/rawdata", why?
I have this exact issue after upgrading to 6.5.1 as well. It only happens on searches over 30 days. My install is on a single instance centos server.