All Apps and Add-ons

FireEye TA - Could not load configuration for collection 'acknotescoll'

marklaw2
Explorer

I'm seeing this error in the splunkd.log. Anyone else having this issue?

MongoModificationsTracker - Could not load configuration for collection 'acknotescoll' in application 'TA-FireEye_v3'. Collection will be ignored.

Powers64
Explorer

This question is the same as: https://answers.splunk.com/answers/564192/fireeye-error-message-could-not-load-configuration.html

I too had this issue. I created a collections.conf in TA app (found it in the app but not in TA). Errors disappeared. Found no mention of collection in documentation or video guides.

The content is:

#
# Splunk app KV Store collection file
#

[acknotescoll]
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...