How to resolve messages about 'File Integrity checks' for Splunk files

[sloshburch]

Getting this message "File Integrity checks found files that did not match the system-provided manifest. See splunkd.log for details."

Anyone seen this before? Any idea what it's about?

Seeing this in the splunkd.log:

09-24-2016 11:12:26.554 -0400 WARN  InstalledFilesHashChecker - An installed file="/opt/splunk/etc/log.cfg" did not pass hash-checking due to reason="content mismatch"

I'm using log-local.cfg so I'm wondering what I messed up here.

[rsennett_splunk]

is there a search head cluster involved?

[sloshburch]

SHC is being used and it appears this is only happening there now. Checking if the config over there is good. Running on 6.5.0.

[mbschriek]

Is there already a solution to this error? I'm getting the same messages and the splunkd.log is not informative.