Further to my previous information, last night I stayed up until midnight to see what happens. All worked well until 23:59 then data collection stopped, I restated the server at 00:08 and all returned to normal and has run ever since, it also regenerated the same error message. So, midnight is the problem! I tried this on a Mac and also a Microsoft Win 10 Desktop and both are the same.    I don't have a workaround for this other than reverting to a previous release. so, any help would be appreciated.  This data comes from a system I designed and built to control my Solar and Heat Pump system to optimise the used Energy used, therefore less than 20 Data Points are involved. What I really don't like is every minute all night collecting zeros from my Solar Output. surely if two or more values are the same the system should not process them as it just wastes disk space and processing power. If a user requests a report these gaps can easily be filled in with the last data at the same interval. Best Regards ... View more

 The error message I receive every morning is as follows: Missing or malformed messages.conf stanza for MOD_INPUT:INIT_FAILURE__ssg_subscription_modular_input_the app "splunk_secure_gateway"_Introspecting scheme=ssg_subscription_modular_input: script running failed (exited with code 1).20/11/2022, 05:16:27   I immediately thought this had been changed for the Free version only as it refers to the subscription_modular_input. Maybe not? I can redirect my data to your test rig if it helps, just need an ip and port no! Regards Alan Beresford       ... View more

I have a similar problem but only with UDP inputs, this has worked successfully for four or so years with previously installed Splunk versions and only failed with 9.0.1 release.  If I restart the Server, it always restarts and runs until 23:x.x pm. It seems to be time related as if I restart the Server at 23:00 it still stops at 23:30 or close. If I restart at 00:10 it will run ok until the following evening. ... View more