Hello,
I was having an issue with Splunk where I made one small change to a config file to disable weak cipher suites, and after the change, I couldn't access the web interface, and couldn't start/restart the splunkd service, even after changing the config back to how it originally was. Without a thought in my head, I uninstalled Splunk, rebooted, and reinstalled Splunk.
After doing so, Splunk was running as if it were a brand new install, and none of my logs are there anymore.
Is there any possible way to recover my logs now that I have screwed everything up?
Thanks,
Christopher
... View more