I'm seeing this error in the splunkd.log. Anyone else having this issue?
MongoModificationsTracker - Could not load configuration for collection 'acknotescoll' in application 'TA-FireEye_v3'. Collection will be ignored.
This question is the same as: https://answers.splunk.com/answers/564192/fireeye-error-message-could-not-load-configuration.html
I too had this issue. I created a collections.conf in TA app (found it in the app but not in TA). Errors disappeared. Found no mention of collection in documentation or video guides.
The content is:
#
# Splunk app KV Store collection file
#
[acknotescoll]