I'm regularly seeing a warning triangle appear, who to I search to fine our what is causing this
Thanks for the clarification. There are many places where a yellow triangle can appear so it was hard to know which you were seeing.
I recommend ignoring the IOWait alert since it tends to be over-sensitive. Tune the health check (Settings->Health Report Manager) so the alert appears less often.
Clicking on the triangle should display explanatory text. Share that text here if you need help understanding it.
Without giveout more information so we can help you (it's better to provide more context as to your issue, screen shots etc) that said it sounds like its related to risky commands.
Maybe its to do with this.
https://docs.splunk.com/Documentation/Splunk/9.2.1/Security/SPLsafeguards
It showing as green circle at the moment, but it keeps flashing a warning see screen shot below
Thanks for the clarification. There are many places where a yellow triangle can appear so it was hard to know which you were seeing.
I recommend ignoring the IOWait alert since it tends to be over-sensitive. Tune the health check (Settings->Health Report Manager) so the alert appears less often.