thanks for the response. I've got the app installed in the search peers. i'm thinking maybe i remove from the search peers (indexers). run the app on a heavy forwarder and have this push/tag events into the indexer cluster.
i've removed from the search head for the time being, so the annoying messages are gone.
whats weird is that everything is functioning correctly. the app works really well. it is just that yellow warning message.
... View more