topic Re: Forwarder Management Issue in Deployment Architecture

Forwarder Management Issue

jafaruddinlie — Mon, 28 Sep 2020 18:06:19 GMT

Hi all
I am getting this message on Splunk 6.2.0 after upgrading from 5:

The forwarder management interface does not support some settings in your serverclass.conf file. The interface is now read-only.

One of the offending lines (from the search): WARN DS_DC_Common - Attribute unsupported by UI: stanza=serverClass:windows property=filterType reason='unsupported at this level' The stanza looks OK in the conf file.

The screen is now in read-only mode, can anyone help me with this? Thanks!

Re: Forwarder Management Issue

carmitstead — Tue, 20 Jan 2015 21:15:00 GMT

I'm also getting this error message. The filterType directive is not declared at the global or app level at all. Thinking that I have to declare it in each stanza?

Re: Forwarder Management Issue

lguinn2 — Tue, 20 Jan 2015 22:03:07 GMT

filterType is not supported by Forwarder Management at any level. You must remove all filterType attributes from serverclass.conf
if you want to use Forwarder Management.

Here is a List of incompatibilities between the old serverclass.conf and what is supported by Forwarder Management.

Re: Forwarder Management Issue

carmitstead — Tue, 20 Jan 2015 22:05:44 GMT

Thanks for the answer. I don't have it specified anywhere that I know of. But I'll do a thorough check.

Re: Forwarder Management Issue

carmitstead — Tue, 20 Jan 2015 22:42:39 GMT

Found it. Instead of finding it in my deploymentclient app's serverclass.conf, I found the filterType directives in my $SPLUNK_HOME/etc/system/local/serverclass.conf. They are commented and the errors are gone.

Re: Forwarder Management Issue

shandr — Tue, 01 Sep 2020 06:57:44 GMT

New link is
https://docs.splunk.com/Documentation/Splunk/8.0.5/Updating/Forwardermanagementcompatibility#List_of_incompatibilities