I find these in splunkd.log and the inputs.conf doesn't seem to be working
INFO ViewstateReaper - Failed to reap viewstate flashtimeline:fwkfntuv (user: nobody, app:xxx, root: xxxxxxxxx\SplunkUniversalForwarder\etc): Not removable: /nobody/xxxxxx/viewstates/flashtimeline:fwkfntuv
INFO ViewstateReaper - Failed to reap viewstate *:fwkg4tq9 (user: nobody, app:XXXXX, root:XXXXXXX\SplunkUniversalForwarder\etc): Not removable: /nobody/XXXXXX/viewstates/*:fwkg4tq9
