Every time I restart splunk, 100s of warning messages drop down box appears in the search head interface top right (next to settings / activity / help drop down box)
=== Messages are like below ===
Configuration file settings may be duplicated in multiple apps: stanza="WinMgmt_System_Reboot Overtime" file="savedsearches" apps="splunk_app_microsoft_exchange,splunk_app_windows_infrastructure"
Configuration file settings may be duplicated in multiple apps: stanza="WinMgmt_Security_Logon_Unsuccessful" file="savedsearches" apps="splunk_app_windows_infrastructure,splunk_app_microsoft_exchange
Configuration file settings may be duplicated in multiple apps: stanza="WinMgmt_Security_Logon_Success Overall by Host" file="savedsearches" apps="splunk_app_windows_infrastructure,splunk_app_microsoft_exchange"
The app for Win Infra and exchange should not be installed on the same search head as the app for MS Exchange has Winfra built into it.
The app for Win Infra and exchange should not be installed on the same search head as the app for MS Exchange has Winfra built into it.
You should click Accept
on your answer (thank you for sharing).