I have configured the box add-on correctly, however I am receiving the following error on the web portal under "Messages"
Search peer splunk-par-peer.geant.net has the following message: Received event for unconfigured/disabled/deleted index=boxdata with source="source::https://api.box.com::BoxInputEvents" host="host::splunk-fra-sh.geant.net" sourcetype="sourcetype::box:events". So far received events from 2 missing index(es).
@montydo
Can you please check boxdata
index??
In Splunk Web, navigate to Settings > Indexes
Is it available OR disabled?
I don't have a boxdata index,
I have configured the add-on to send all data to a different index, but am still getting errors for the old index.
Can you please check any index name mentioned in inputs.conf
??
Anything like
index = boxdata