Splunk universal forwarder inputs.conf batch stanza is attempting to read CSV files that range in size from a 10MB to 2GB. On the forwarder the splunkd.log shows "Stale file handle" and "CRC calculation" related warnings and errors on the larger files i.e. 800MB and 1.4GB. The files are not indexed and then they are deleted. Are there hard or configured file size limits? and/or What might cause these issues other than file size?
↧