search

seunomosowon / TA-mailclient

This technology adapter add-on fetches emails for Splunk to index from mailboxes using either POP3 or IMAP, with or without SSL.
Apache License 2.0
9 stars 10 forks source link

Invalid keys in stanza #19

Closed edro15 closed 3 years ago

edro15 commented 3 years ago

OS details

  Operating System: CentOS Linux 7 (Core)
  Kernel: Linux 3.10.0-1127.13.1.el7.x86_64
  Architecture: x86-64

Steps performed

At restart, during Splunk conf files check, I got the following errors:

    Checking conf files for problems...
        Invalid key in stanza [mail://email_address@domain.com] in $SPLUNK_HOME/etc/apps/TA-mailclient/local/inputs.conf, line 3: is_secure  (value:  1).
        Invalid key in stanza [mail] in $SPLUNK_HOME/etc/apps/TA-mailclient/default/inputs.conf, line 2: python.version  (value:  python3).
        Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug'
seunomosowon commented 3 years ago

You can take is_secure out. I reconfigured the new version of the app to only support secure connection to mailboxes, so that parameter has been removed.

I should have put a note on the réarme to say that needs to be removed going forward.

Cheers, Seun

On Mon, 28 Dec 2020 at 13:40, Erica Pescio notifications@github.com wrote:

OS details

Operating System: CentOS Linux 7 (Core) Kernel: Linux 3.10.0-1127.13.1.el7.x86_64 Architecture: x86-64

Steps performed

  • installed the app in a single server Splunk 7.3 instance,
  • configured local/inputs.conf following documentation, and
  • restarted splunk.

At restart, during Splunk conf files check, I got the following errors:

Checking conf files for problems...
  Invalid key in stanza [mail://email_address@domain.com] in $SPLUNK_HOME/etc/apps/TA-mailclient/local/inputs.conf, line 3: is_secure  (value:  1).
  Invalid key in stanza [mail] in $SPLUNK_HOME/etc/apps/TA-mailclient/default/inputs.conf, line 2: python.version  (value:  python3).
  Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug'

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/seunomosowon/TA-mailclient/issues/19, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAH5TMZD25ADSOFNRSSN7HTSXCDFLANCNFSM4VMBK5BQ .