Has anyone seen the fact that the deployment server does not include the _OUT_ as part of the bundle it creates and pushes out to the forwarders? Is there a way to force it?
It then causes an error indicating that the log file location is not found.
Splunk_TA_ONTAP7\_OUT_\log\snap.__mymachinename.log
I currently have to go in and manually create the tree at the location.
Im running: All Servers are - windows 2008 R2 on virtualized hardware. All Splunk components running - Splunk: 5.0.3