I see a lot of these errors on one of my Clusterindexer, its an indexer with legacy data (not replicated in cluster).
Does anyone know what this is telling me? since I can´t find anything on answers or docs.
WARN CMHeartbeatThread - event=SummaryRegistration got unknown_state for summary at path=$SPLUNK_DB/<index_name>/datamodel_summary/0_B8208014-CC0D-484A-8304-72E85F04F7AF/1DA71394-60C4-4788-BDEB-31F414XXXX/DM_Splunk_SA_CIM_XXXX.smlock.<indexer_name>-9298.temp-140536340007468
Sounds like the SH(1DA71394-60C4-4788-BDEB-31F414XXXX) is trying to run something on this indexer?!
Its a no-op warning. The cluster will monitor for new summaries in the summary path (summaries are always folders). However, there are also temporary files in there (as the one listed above), that our code will log a WARNING against.
edit - is that file a folder btw? seems like we already guard against it in code...