getting this error When Splunk runs the process, "checking conf files for problems..." during restart,
Checking: C:\program files\splunk\etc\apps\TA-meraki\local\inputs.conf
Invalid key in stanza [monitor:///logpartition/2017/meraki/] in C:\program files\splunk\etc\apps\TA-meraki\local\inputs.conf, line 10: SHOULD_LINEMERGE (val
ue: false).
Did you mean 'source'?
Did you mean 'sourcetype'?
Below is what my **inputs.conf** looks like
[udp://1514]
connection_host = dns
index = meraki
sourcetype = meraki
disabled = 0
[default]
host_segment = 4
[monitor:///logpartition/2017/meraki/]
SHOULD_LINEMERGE=false
sourcetype = meraki
index=meraki
[monitor:///logpartition/2017/meraki/]
SHOULD_LINEMERGE=false
sourcetype = meraki
index=meraki
↧