File integrity error

[RihabCH2]

Hello,

I get this error in the splunk server "File Integrity checks found 1 files that did not match the system-provided manifest. See splunkd.log for details" I have verifiy the file splunkd.log but I don't found any message that can help me.

I acced to :

https://[your_splunk]:8089/services/server/status//installed-file-integrity

and I found this status :

check_failures

C:\Program Files\Splunk\etc/apps/launcher/metadata/default.meta differs

What can i do?

I will appreciate all your helps

Thank you

[richgalloway]

I'm guessing someone edited the file C:\Program Files\Splunk\etc/apps/launcher/metadata/default.meta. One must never modify a default file, whether in a directory called 'default' or default.meta. Make the desired changes in the 'local' directory or in local.meta. The fix is simple: restore the original default.meta and make your changes in local.meta.