Assume a file is being monitored and the data was incorrectly indexed to an exclusive index. The index is cleaned and now the data must be reindexed. What other index must be cleaned to reset the input checkpoint information for that file?
Assume a file is being monitored and the data was incorrectly indexed to an exclusive index. The index is cleaned and now the data must be reindexed. What other index must be cleaned to reset the input checkpoint information for that file?
In Splunk, when a file is being monitored and checkpoint information needs to be reset, the fishbucket index (_thefishbucket) must be cleaned. The fishbucket index contains checkpoint information for file monitoring inputs and is essential to ensuring that data is reindexed correctly.
D. _thefishbucket, it's purpose is to contain checkpoint information for file monitoring inputs.
Answer: D --reset Reset the fishbucket for the given key or file in the btree. Resetting the checkpoint for an active monitor input reindexes data, resulting in increased license use. https://docs.splunk.com/Documentation/Splunk/8.1.1/Troubleshooting/CommandlinetoolsforusewithSupport
Shouldn't be D ? https://community.splunk.com/t5/Getting-Data-In/How-to-reindex-data-from-a-forwarder/m-p/93310
D is correct
D is correct, Sysadmin page 105
D. P132 Data admin pdf
D is the right option
Absolutely, the answer is D.
D is correct