Are you using a custom certificate, and is it secured with a password? This error suggests an incorrect password, or possibly the password uses special characters and mongod doesn't like them. I found a case where someone using mongod and logging in from the command line had to escape out the special characters in their password. I don't see how that would be an issue with Splunk's implementation o mongod, but might be a good thing to test. In the meantime, I will continue researching as I am working with another Splunk user encountering the same message. ... View more

Splunk Windows 8.2.10 (upgraded from 8.2.6) -  Who/What would put that in alert_actions.conf? [email] show_password = True   Should I: a. delete the alert_actions.conf file (nothing else is in the file) ? b. Change it to False? c. delete the file contents, but leave the empty file there? ... View more

@inventsekar wrote: the path was configured mistakenly i think. Where is that path configured in a Windows Splunk Enterprise installation?  Update: Looks like @rbreton answered it here in 2017! I need another Windows environment variable: OPENSSL_CONF = %SPLUNK_HOME%\openssl.cnf ... View more

Fixed error in regex that did not work correctly An even better regex to get just the file name (especially for long path name) (?:[^\\]+\\)+([^.]+).log$ ... View more