https://community.splunk.com/t5/Splunk-Enterprise/splunk-error-message-when-launch-splunk-web/m-p/50935#M8724 <P>When I launch Splunk web interface,I get next message.How to fix it?</P> <P>"received event for unconfigured/disabled index='_audit' with source='source::audittrail' host='host::myhostname' sourcetype='sourcetype::audittrail'.</P> Mon, 28 Feb 2011 15:45:29 GMT bwenge 2011-02-28T15:45:29Z https://community.splunk.com/t5/Splunk-Enterprise/splunk-error-message-when-launch-splunk-web/m-p/50935#M8724 <P>When I launch Splunk web interface,I get next message.How to fix it?</P> <P>"received event for unconfigured/disabled index='_audit' with source='source::audittrail' host='host::myhostname' sourcetype='sourcetype::audittrail'.</P> Mon, 28 Feb 2011 15:45:29 GMT https://community.splunk.com/t5/Splunk-Enterprise/splunk-error-message-when-launch-splunk-web/m-p/50935#M8724 bwenge 2011-02-28T15:45:29Z https://community.splunk.com/t5/Splunk-Enterprise/splunk-error-message-when-launch-splunk-web/m-p/50936#M8725 <P>Click <STRONG>Manager--&gt;Indexes</STRONG>, then "<STRONG>Enable</STRONG>" the <STRONG>_audit</STRONG> index. It should then be fixed when you <STRONG>restart</STRONG> Splunk.</P> Mon, 28 Feb 2011 16:05:33 GMT https://community.splunk.com/t5/Splunk-Enterprise/splunk-error-message-when-launch-splunk-web/m-p/50936#M8725 Ron_Naken 2011-02-28T16:05:33Z