Forwarder Management Issue

[jafaruddinlie]

Hi all
I am getting this message on Splunk 6.2.0 after upgrading from 5:

The forwarder management interface does not support some settings in your serverclass.conf file. The interface is now read-only.

One of the offending lines (from the search): WARN DS_DC_Common - Attribute unsupported by UI: stanza=serverClass:windows property=filterType reason='unsupported at this level' The stanza looks OK in the conf file.

The screen is now in read-only mode, can anyone help me with this? Thanks!

[lguinn2 · Accepted solution]

filterType is not supported by Forwarder Management at any level. You must remove all filterType attributes from serverclass.conf
if you want to use Forwarder Management.

Here is a List of incompatibilities between the old serverclass.conf and what is supported by Forwarder Management.

[shandr]

New link is 
https://docs.splunk.com/Documentation/Splunk/8.0.5/Updating/Forwardermanagementcompatibility#List_of...

[carmitstead]

Found it. Instead of finding it in my deploymentclient app's serverclass.conf, I found the filterType directives in my $SPLUNK_HOME/etc/system/local/serverclass.conf. They are commented and the errors are gone.

[carmitstead]

Thanks for the answer. I don't have it specified anywhere that I know of. But I'll do a thorough check.

[carmitstead]

I'm also getting this error message. The filterType directive is not declared at the global or app level at all. Thinking that I have to declare it in each stanza?