Hello Team,
I am getting below warning. Is it harmful?
check_for_indexer_synced_configs
default/inputs.conf will not be synced to indexers in Victoria. If this file is necessary on indexers, configure the settings in the Splunk UI or via Admin Config
Actually, it's the opposite of harmful. The check ensures indexers are not running inputs and potentially creating duplicate data.
Thanks for answer. Any suggestion to resolve this warning?
Since it's only a warning, there should be need to resolve it, but I think the only resolution is to remove inputs.conf from the app (which you probably can't do). I suspect you'll have to live with the warning.