The eventtype does not exist in any of the windows apps on Splunkbase.
If you collect the windows directory services event log you can create a global eventtype that points to the index and source or sourcetype for that data.
If you do NOT collect the directory services event log, you can create something like this in any app and share it globally:
[wineventlog-ds]
search = index=badindex sourcetype=bad
Presumably this will not return any data and will run quickly so it should not add much overhead to searches that reference it.
Once the search bundle gets deployed to the indexers the errors will go away.
... View more