I met the warning message in forwarder management which said "One or more apps are initializing download. Please refresh later to see the accurate status of these downloads".
Later I refreshed browser, but it was appeared again.
And I also restart splunk, but it was same.
What does this message mean ?
How is it not displayed ?
Thank you for your help.
Also happened to me; clearing /opt/splunk/etc/system/local/serverclass.conf and then running "splunk reload deploy-server" worked to get rid of the warning on the forwarder management web page. I'm running x86_64 v6.2.1 build 245427
I was just getting started, only had 2 server classes. I assume I'll be seeing this again.
I managed to clear this message by deleting all the serverclasses and then re-adding them. This removed the messages and got the apps downloading again.
My guess is SPlunk gets confused as to what has changed on the forwarder(s) and isn't logging the error back correctly.
I have the same issue in Splunk v.6.0.3, "splunk reload deploy-server" and "splunk restart" did not help. As for suggestion: "Have you attempted to restart the splunkforwarder to which the apps are being downloaded?" - there is no easy way to find which forwarder is doing it...