All Apps and Add-ons
Highlighted

Splunk on Splunk: After upgrading to Splunk 6.2, why won't the splunkd service if I have an indexes.conf file in the local folder under etc\apps\sos?

Engager

Splunkd log has the message problem parsing indexes.conf: stanza=summary_forwarders Required parameter=homePath not configured

Highlighted

Re: Splunk on Splunk: After upgrading to Splunk 6.2, why won't the splunkd service if I have an indexes.conf file in the local folder under etc\apps\sos?

Splunk Employee
Splunk Employee

I think that for some reason, you may have a partial definition for the "summaryforwarders" index in `%SPLUNKHOME%\etc\apps\sos\local`. This index is not related to the S.o.S app. To the best of my knowledge, it is part of the Deployment Monitor app, which I assume you had installed at one point in the past.

If you don't have that app anymore, my recommendation would be to remove that index definition from the file in question, or to remove %SPLUNK_HOME%\etc\apps\sos\local\indexes.confaltogether if that is the only thing that it contains.