After installing the new Alert Manager app, I received the following message in Splunkd.log
"MongoModificationsTracker - Could not load configuration for collection 'drilldown_settings' in application 'alert_manager'. Collection will be ignored."
This is because there isn't a stanza value in the collections.conf titled drilldown_settings, as well as no key value pairs. I've disabled the collections within lookups so the error no longer fires.
Is this something that was missed by the App author?
Is drilldown_settings remnants from the older version of alert_manger?
If you repaired this within collections.conf could you be specific about where you find the information? (ie which Python script and where at in the Python script),Hello,
... View more