Possible typo in stanza in props.conf, line 2: AUTO_LINEMERGE = FALSE

[pocheung]

I am getting this error with Splunk 5.0.4:

Possible typo in stanza [sun_jvm] in /opt/splunk/etc/apps/myapp/default/props.conf, line 2: AUTO_LINEMERGE = FALSE

How can I get rid of this warning/error?

Here's my props.conf (which originated from http://wiki.splunk.com/Community:Monitoring_JVMs)

[sun_jvm]

AUTO_LINEMERGE = FALSE

SHOULD_LINEMERGE = TRUE

DATETIME_CONFIG = CURRENT

BREAK_ONLY_BEFORE = \d+.\d+:

REPORT-jvm = sun_jvm_gc

[lguinn2 · Accepted solution]

There is no attribute called AUTO_LINEMERGE. Remove the line from your props.conf

[ncsantucci]

While that is true, I saw this on the Splunk Data-Onboarding Checklist

http://blogs.splunk.com/wp-content/uploads/2010/03/SplunkOnBoardingChecklist.pdf