I'm getting the following error after I upgraded to Splunk 6.3:
Search peer Splunk has the following message: Found stanza=_blocksignature in indexes.conf. The block-signing feature is no longer available in Splunk. Please remove stanza=[_blocksignature] from the indexes.conf. For further details, please refer to the related topic in the latest version of 'Securing Splunk' manual on docs.splunk.com.
After running the btool command, I'm still unable to find this stanza in indexes.conf. Has anyone seen this issue before?
↧