I get an error when starting splunkd, Invalid key in stanza [api-keys], in both the local and default directories.
Are there certain values I should be assigning to the php-api-key?
[api-keys] php-api-key =
Should I just comment out that stanza in both files? I have a feeling my inexperience in both NetScreen and Splunk may be coming into play here.
Considering that the app didn't get any updates since Aug. 6, 2013... and is not verified for splunk 6.x ... I would manually comment out the section.
I have done so on my splunk and it didn't impact any data.
The api-key is for the Project Honey Pot. check the note in the Top 10 Malicious Destinations panel.