I'm getting a few errors on the search head and trying to narrow down what the issues are. One thing I noticed on the indexers was a large replication bundle size (150MB). We have quite a few apps so that could be causing the large size. (I've extracted the errors I'm seeing in the splunkd.log and posting them at the bottom).
Here's what I've done so far:
My distsearch.conf on the search head is posted below (note the change I made was the blacklist portion) but it is still sending the contents of the bin folders to the indexers as part of the bundle replication. Am I doing something wrong or do I need to make this change elsewhere?