Indeed, the log shows bucket collision.
02-02-2012 15:32:05.830 -0600 ERROR DatabaseDirectoryManager - Splunk has detected that a directory has been manually copied into its database, causing id conflicts [D:\Splunk\var\lib\splunk\defaultdb\db\db_1308843089_1306506209_14, D:\Splunk\var\lib\splunk\defaultdb\db\db_1310499939_1310495443_14].
However, I am not sure how to rename the conflicting buckets:
D:\Splunk\var\lib\splunk\defaultdb\db\db_1308843089_1306506209_14 dated 1/31/2012
D:\Splunk\var\lib\splunk\defaultdb\db\db_1310499939_1310495443_14 dated 2/1/2012
Thank you again for your help.
... View more