All Apps and Add-ons

How to fix errors in Splunk_TA_ipfix/default/eventgen.conf

qinli
New Member

"splunk btool check --debug" command shows the following errors. We have splunk 6.21 and Splunk_TA_ipfix 5.02. Any idea as what to do to fix this?

Checking: /home/splunk/etc/apps/Splunk_TA_ipfix/default/eventgen.conf
Invalid key in stanza [appflow.raw] in /home/splunk/etc/apps/Splunk_TA_ipfix/default/eventgen.conf, line 4: mode (value: sample)
Invalid key in stanza [appflow.raw] in /home/splunk/etc/apps/Splunk_TA_ipfix/default/eventgen.conf, line 6: sampletype (value: raw)
Did you mean 'spoolDir'?
Did you mean 'spoolFile'?
Invalid key in stanza [appflow.raw] in /home/splunk/etc/apps/Splunk_TA_ipfix/default/eventgen.conf, line 8: bundlelines (value: true)
Did you mean 'breaker'?
Invalid key in stanza [appflow.raw] in /home/splunk/etc/apps/Splunk_TA_ipfix/default/eventgen.conf, line 10: outputMode (value: splunkstream)
Invalid key in stanza [appflow.raw] in /home/splunk/etc/apps/Splunk_TA_ipfix/default/eventgen.conf, line 11: host (value: ns.acme)
Invalid key in stanza [appflow.raw] in /home/splunk/etc/apps/Splunk_TA_ipfix/default/eventgen.conf, line 12: sourcetype (value: ipfix)
Did you mean 'spoolDir'?
Did you mean 'spoolFile'?

0 Karma
1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

If you need event generation, get the Eventgen from github and install it. If you don't, you can delete the conf file or add an eventgen.conf.spec.

View solution in original post

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

If you need event generation, get the Eventgen from github and install it. If you don't, you can delete the conf file or add an eventgen.conf.spec.

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...