Splunk crashes after restart. If i rename the config files its starts without a problem.
Version is 5.01
My configs:
input.conf
[monitor:///mnt/netapp/vol0_filer0/etc/log]
disabled = false
followTail = 0
host_segment = 3
index = netapp
blacklist = (stats)|(/mlog/.last_rotate)|(/log/autosupport)
[monitor:///mnt/netapp/vol0_filer1/etc/log]
disabled = false
followTail = 0
host_segment = 3
index = netapp
blacklist = (stats)|(/mlog/.last_rotate)|(/log/autosupport)
[script://$SPLUNK_HOME/etc/apps/SplunkAppforNetApp/bin/SNap.py -h 01]
disabled = 0
interval = 500
sourcetype = netapp:internal
index = netapp
snap_hosts.csv
10.2.X.X, user_api, somepass
10.2.X.X, user_api, somepass
... View more