https://community.splunk.com/t5/Getting-Data-In/Unexpected-duplicate-app-cluster/m-p/79356#M16267 <P>Look in <CODE>/opt/splunk/etc/apps</CODE> for an entry called <CODE>_cluster</CODE>. Remove it and restart splunk. The error should go away.</P> <P>In my case I had to do a little extra. I was messing around trying to get the shuttl app to work. I somehow managed to create some duplicate buckets in my <CODE>_internal</CODE> and <CODE>_audit</CODE> indexes. Until I fixed the duplicates, splunk kept re-creating that <CODE>_cluster</CODE> app (it was using that app to create a <CODE>indexes.conf</CODE> which disabled the <CODE>_internal</CODE> and <CODE>_audit</CODE> indexes) whenever I tried to remove it.</P> Sun, 05 May 2013 03:08:42 GMT phemmer 2013-05-05T03:08:42Z https://community.splunk.com/t5/Getting-Data-In/Unexpected-duplicate-app-cluster/m-p/79355#M16266 <P>So we recently had clustering enabled in our environment and decided to remove it and now we keep getting the following error when starting our indexers: ERROR ApplicationManager - Unexpected duplicate app: _cluster. The indexer starts fine but what can I do to get rid of this message?</P> Fri, 29 Mar 2013 14:28:14 GMT https://community.splunk.com/t5/Getting-Data-In/Unexpected-duplicate-app-cluster/m-p/79355#M16266 aaronkorn 2013-03-29T14:28:14Z https://community.splunk.com/t5/Getting-Data-In/Unexpected-duplicate-app-cluster/m-p/79356#M16267 <P>Look in <CODE>/opt/splunk/etc/apps</CODE> for an entry called <CODE>_cluster</CODE>. Remove it and restart splunk. The error should go away.</P> <P>In my case I had to do a little extra. I was messing around trying to get the shuttl app to work. I somehow managed to create some duplicate buckets in my <CODE>_internal</CODE> and <CODE>_audit</CODE> indexes. Until I fixed the duplicates, splunk kept re-creating that <CODE>_cluster</CODE> app (it was using that app to create a <CODE>indexes.conf</CODE> which disabled the <CODE>_internal</CODE> and <CODE>_audit</CODE> indexes) whenever I tried to remove it.</P> Sun, 05 May 2013 03:08:42 GMT https://community.splunk.com/t5/Getting-Data-In/Unexpected-duplicate-app-cluster/m-p/79356#M16267 phemmer 2013-05-05T03:08:42Z