I just had this issue resolved. Check to see if your indexers are running the same version of splunk as your ES search head. They should be identical. Also make sure to deploy the Splunk_TA_ForIndexers from your ES search head to your indexers.
... View more
Hi wiredmonkey and others,
the app is now available with debugging feature and error handling on non-existing MAC's.
Thanks for providing the test events, they were really useful.
hope this helps ...
cheers, MuS
... View more