The error message is indicating that the cluster master is attempting to push .conf files for which is does not contain a valid SPEC file. For example the eventgen.conf does not exist as part of the default splunk install. Therefore if an app wants to leverage this file , it would need a corresponding SPEC file in order to utilize this eventgen.conf. Because this file is missing the bundle will flag the config as invalid and refuse to push it until it's resolved
You can fix this issue in one of a few ways
You can remove all instances of the problematic .conf files (this could possibly break app functionality)
If you recently upgraded an app and started getting this issue, you should make sure that when you upgraded you did not leave in place any .conf files that are no longer leveraged by the app
You can add in the spec files for the .conf files referenced, this will allow splunk to push out the cluster bundle and avoid the errors.
You can push the bundle to ignore these errors by adding the --skip-validation flag (not recommended unless you know what you are doing as this could cause bad conf to get pushed out)
If you find that an app is giving you these errors AND the spec file for that app is not included, you may want to alert the app developer of this problem.
... View more