I now get these messages when the indexers start up:
Checking filesystem compatibility... Done
Checking conf files for problems...
Improper stanza [dhcpd_server_dhcprelease] in /splunk/etc/apps/Splunk_TA_nix/default/tags.conf, line 30
Value in stanza [app=/network/ntp:default] in /splunk/etc/apps/Splunk_TA_nix/default/tags.conf, line 783 not URI encoded: app = /network/ntp:default
Value in stanza [shell=/bin/bash] in /splunk/etc/apps/Splunk_TA_nix/default/tags.conf, line 835 not URI encoded: shell = /bin/bash
Value in stanza [shell=/bin/sh] in /splunk/etc/apps/Splunk_TA_nix/default/tags.conf, line 838 not URI encoded: shell = /bin/sh
Value in stanza [shell=/usr/bin/bash] in /splunk/etc/apps/Splunk_TA_nix/default/tags.conf, line 841 not URI encoded: shell = /usr/bin/bash
Value in stanza [shell=/usr/bin/pfksh] in /splunk/etc/apps/Splunk_TA_nix/default/tags.conf, line 844 not URI encoded: shell = /usr/bin/pfksh
Value in stanza [shell=/usr/bin/pfsh] in /splunk/etc/apps/Splunk_TA_nix/default/tags.conf, line 847 not URI encoded: shell = /usr/bin/pfsh
Value in stanza [Service_Name=kadmin/changepw] in /splunk/etc/apps/Splunk_TA_windows/default/tags.conf, line 135 not URI encoded: Service_Name = kadmin/changepw
Value in stanza [app=win:local] in /splunk/etc/apps/Splunk_TA_windows/default/tags.conf, line 198 not URI encoded: app = win:local
Value in stanza [app=win:remote] in /splunk/etc/apps/Splunk_TA_windows/default/tags.conf, line 201 not URI encoded: app = win:remote
Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug'
Done
All preliminary checks passed.
Has anyone seen this? What is the fix?
... View more