I just recently upgraded from 4.1.3 to 4.1.5.
I also just added some fschange monitoring to inputs.conf and now after restart, I receive this in my SplunkWeb:
Applying indexing throttle for defaultdb\db because bucket has too many tsidx files, is your splunk-optimize working?
I have no idea what this means. Has anyone else seen this?
Had a corrupt bucket.
View solution in original post
On a related note, see the following answer: