Splunk Enterprise

Where does this Btool Warning Come From (Regex)

Path Finder

Hello Everyone,

Doing some Splunk Maintainance today, working through issues.  This is one that has me stumped.  Comes up when I restart splunk.  Splunk is still running though.

Can anyone help me on the location of this error, so I can fix it?  




Labels (1)
Tags (1)
0 Karma


I'd start by using the find command to see if the reported string is in any of your props.conf files.

find /opt/splunk/etc -name props.conf -print0 | xargs -r0 grep "\(::)\?"

When you find that you should know what needs fixing.

If this reply helps you, an upvote would be appreciated.
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!