Hello,
I get this error in the splunk server "File Integrity checks found 1 files that did not match the system-provided manifest. See splunkd.log for details" I have verifiy the file splunkd.log but I don't found any message that can help me.
I acced to :
https://[your_splunk]:8089/services/server/status//installed-file-integrity
and I found this status :
check_failures
C:\Program Files\Splunk\etc/apps/launcher/metadata/default.meta differs
What can i do?
I will appreciate all your helps
Thank you
I'm guessing someone edited the file C:\Program Files\Splunk\etc/apps/launcher/metadata/default.meta. One must never modify a default file, whether in a directory called 'default' or default.meta. Make the desired changes in the 'local' directory or in local.meta. The fix is simple: restore the original default.meta and make your changes in local.meta.