We have a strange issue wherein the file is not being forwarded using universal splunk forwarder.
For a given day, splunk forwarder is forwarding the csv input file from the monitored path 2 times only and stops sending afterwards.
The file name for a given day is unique ( for example, test.csv for 6th Oct 2017) and hence we have enabled cyclic redundancy check etc in inputs.conf.
crcSalt =
initCrcLength = 1048576
But, if I am renaming the file in OS level, its readily sent to splunk indexer.
... View more