Every time time I restart my search head, I get the following warning for three of my users.
Possible typo in stanza [install] in /opt/splunk/etc/users/*username*/webintelligence/local/app.conf, line 2: hasIgnored = True
The file contains just that variable:
[install]
hasIgnored = True
I'm pretty sure it would be safe just to rm those files, since its not successfully processing anything, but I'd like to understand what's really going on. The users say they didn't add it themselves. Did the app just misconfigure itself?
Thanks,
Mitch
In the current version of the app on Splunkbase, the module that tries to assist you when you first visit the app sets this key/value pair in app.conf.
All it is doing is reminding the app that username has previously asked not to be bothered by the module's modal notifications ('this app needs configuration', etc).
In the forthcoming version of the Splunk app for WebIntelligence, this function and key/value pair is moved over to webintelligence.conf so you won't get this annoying message every time you restart Splunk.
In the meantime, it won't hurt anything to delete that file. You might get a modal pop-up when you visit the app's home page, but if as an app admin you run through the app setup page once and click save, the modal will go away.
In the current version of the app on Splunkbase, the module that tries to assist you when you first visit the app sets this key/value pair in app.conf.
All it is doing is reminding the app that username has previously asked not to be bothered by the module's modal notifications ('this app needs configuration', etc).
In the forthcoming version of the Splunk app for WebIntelligence, this function and key/value pair is moved over to webintelligence.conf so you won't get this annoying message every time you restart Splunk.
In the meantime, it won't hurt anything to delete that file. You might get a modal pop-up when you visit the app's home page, but if as an app admin you run through the app setup page once and click save, the modal will go away.