Monitoring Splunk

applyPendingMetadata bug: Issue while configuring iis log monitoring

kamaljagga
Explorer

We have the official iis app from splunkbase and i have been unable to get data from this location for a long time. i recently saw the below mentioned errors and updated the sourcetype name in the inputs.conf to disable props.conf of default sourcetype. 

 

ERROR TailReader - Ignoring path="C:\inetpub\logs\LogFiles\ABCDFEF\u_test_x.log" due to: Bug during applyPendingMetadata, header processor does not own the indexed extractions confs.

ERROR WatchedFile - Bug during applyPendingMetadata, header processor does not own the indexed extractions confs.

 

Kindly advise.

Labels (2)
Tags (1)
0 Karma