Splunk service won't start after upgrading Palo Alto Networks App for Splunk to 5.0. "Problem parsing indexes.conf: stanza=flowintegrator Required parameter=homePath not configured"

[bcdatacomm]

I ran the upgrade to 5.0 of the Palo app and now Splunk won't start. When I try to start the service I get the below error.

Checking prerequisites...
        Checking http port [8000]: open
        Checking mgmt port [8089]: open
        Checking appserver port [127.0.0.1:8065]: open
        Checking kvstore port [8191]: open
        Checking configuration...  Done.
        Checking critical directories...        Done
        Checking indexes...
Problem parsing indexes.conf: stanza=flowintegrator Required parameter=homePath not configured
Validating databases (splunkd validatedb) failed with code '1'.  If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue

I looked at the indexes.conf and saw that it was missing the paths to the DB's, so I added them, but it didn't make a difference.

[pan_logs]
maxTotalDataSizeMB = 800000
homePath = /opt/splunk/var/lib/splunk/pan_logs/db
coldPath = /opt/splunk/var/lib/splunk/pan_logs/colddb
thawedPath = /opt/splunk/var/lib/splunk/pan_logs/thaweddb

[flowintegrator]
maxTotalDataSizeMB = 10000

[btorresgil]

The 5.0 version of the app does not have any built in indexes. Indexes were removed in this 5.0 version. Which means you have something left over from a previous version which is messing things up. My recommendation is to remove the app and install fresh. Or at least remove everything from the local directory.

[bcdatacomm]

I went back into the indexes.conf file and commented out the flowintegrator lines and splunk then started. But not sure what will be broken as a result.

:/opt/splunk/etc/apps/SplunkforPaloAltoNetworks/local# vi indexes.conf 
[pan_logs]
maxTotalDataSizeMB = 800000
homePath = /opt/splunk/var/lib/splunk/pan_logs/db
coldPath = /opt/splunk/var/lib/splunk/pan_logs/colddb
thawedPath = /opt/splunk/var/lib/splunk/pan_logs/thaweddb

#[flowintegrator]
#maxTotalDataSizeMB = 10000
~