All Apps and Add-ons

Alert Manager "MongoModificationsTracker Could not load configuration for ....."

mayestl04
Explorer

Installed Alert Manager on stand-alone Splunk server for testing without any problems. Great app. Replicated the installation process to a single SH and clustered indexers. Created the alerts index on SH and Indexers. Cannot seem to make it work. The only error found is the following (repeating every second). Any help in getting this running would be appreciated.

MongoModificationsTracker - Could not load configuration for collection 'drilldown_settings' in application 'alert_manager'. Collection will be ignored.

0 Karma

mayestl04
Explorer

Never did resolve the "error message", only resolved the fact that the app would not work. Seems the two were/are not related and it works properly even with the error 😕

0 Karma

mayestl04
Explorer

Never fails. Post a question, and murphy resolves the problem

0 Karma

ak9092
Path Finder

May I please know what was the resolution as I am facing similar issue .

0 Karma

mayestl04
Explorer

The resolution was to add a stanza to collections.conf, "[drilldown_settings]"

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...