Today I was doing maintenance on my shcluster bundle and I did an apply bundle. The apply returned an error (timeout) talking to a member. I ended up restarting splunkd on the cluster master. Now on startup, I get an error on the SH Cluster Master. I reviewed hashes on the file and nothing recently changed. So I safely ignored the error and everything appears to be working. Any idea why this is happening?
/opt/splunk/bin/splunk start
Splunk> Like an F-18, bro.
Checking prerequisites...
Checking http port [8443]: open
Checking mgmt port [8089]: open
Checking appserver port [127.0.0.1:8065]: open
Checking kvstore port [8191]: open
Checking configuration... Error while parsing '/opt/splunk/etc/shcluster/apps/splunk_app_db_connect/bin/output/scheme.xml':
mismatched tag: line 28, column 74
Error while parsing '/opt/splunk/etc/shcluster/apps/splunk_app_db_connect/bin/input/scheme.xml':
mismatched tag: line 16, column 73
Error while parsing '/opt/splunk/etc/shcluster/apps/splunk_app_db_connect/bin/lookup/scheme.xml':
mismatched tag: line 25, column 73
There were problems with the configuration files.
Would you like to ignore these errors? [y/n]:y
Done.
Checking critical directories... Done
Checking indexes...
Validated: _audit _internal _introspection _thefishbucket history main perfmon summary windows wineventlog
Done
Checking filesystem compatibility... Done
Checking conf files for problems...
Done
Checking default conf files for edits...
Validating installed files against hashes from '/opt/splunk/splunk-6.3.3-f44afce176d0-linux-2.6-x86_64-manifest'
All installed files intact.
Done
All preliminary checks passed.
Starting splunk server daemon (splunkd)...
Done
[ OK ]
... View more