Splunk Enterprise

Where does this Btool Warning Come From (Regex)

Path Finder

Hello Everyone,

Doing some Splunk Maintainance today, working through issues.  This is one that has me stumped.  Comes up when I restart splunk.  Splunk is still running though.

Can anyone help me on the location of this error, so I can fix it?  




Labels (1)
Tags (1)
0 Karma


I'd start by using the find command to see if the reported string is in any of your props.conf files.

find /opt/splunk/etc -name props.conf -print0 | xargs -r0 grep "\(::)\?"

When you find that you should know what needs fixing.

If this reply helps you, an upvote would be appreciated.
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!