Sometimes after an app has a change made to it when it is deployed to our Universal Forwarders on Windows computers the conf files are malformed. Specifically, the inputs.conf file has all the spaces removed and formatting removed and the forwarder does not use the file anymore. The only fix I have found is to delete the app from the forwarder and wait for the deployment server to re-deploy it.
Hi @nathanhfraenkel,
I never saw this issue and I deployed apps on many thousands of windows clients.
If you have this issue, open a case to Splunk Support.
Ciao.
Giuseppe