topic Re: UF log error in Getting Data In

UF log error

IanSHaynes1 — Thu, 13 Jan 2022 04:08:53 GMT

Getting this issue on a windows server. There's only an inputs.conf file with the following

[monitor://L:\Logs\ApplicationLogs*.log]

sourcetype = xxx

index = yy

disabled = 0

1/12/2022	05:03.3	1000	ERROR	WatchedFile [7088 tailreader0] - Bug during applyPendingMetadata, header processor does not own the indexed extractions confs.
1/12/2022	05:03.3	1000	ERROR	TailReader [7088 tailreader0] - Ignoring path="L:\Logs\ApplicationLogs20220112VServer.log" due to: Bug during applyPendingMetadata, header processor does not own the indexed extractions confs.

SinghK — Thu, 13 Jan 2022 04:34:17 GMT

Where did you create that input? have you added splunk TA windows addon try creating the input in the local directory in that addon.

isoutamo — Thu, 13 Jan 2022 06:58:19 GMT

Are you sure that there are no props.conf stanzas which match your source?

r. Ismo