FireEye TA - Could not load configuration for collection 'acknotescoll'

[marklaw2]

I'm seeing this error in the splunkd.log. Anyone else having this issue?

MongoModificationsTracker - Could not load configuration for collection 'acknotescoll' in application 'TA-FireEye_v3'. Collection will be ignored.

[Powers64]

This question is the same as: https://answers.splunk.com/answers/564192/fireeye-error-message-could-not-load-configuration.html

I too had this issue. I created a collections.conf in TA app (found it in the app but not in TA). Errors disappeared. Found no mention of collection in documentation or video guides.

The content is:

#
# Splunk app KV Store collection file
#

[acknotescoll]