ERROR: Invalid Key in Stanza [tcpout:default-autolb-group] in /opt/splunkforwarder/etc/system/local/outputs.conf, line 27: autoLB (value: true).

Available Languages

Updated:September 28, 2026
Document ID:SPLK044280

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk Enterprise

Description

The 'autoLB' universal forwarder setting in outputs.conf is no longer configurable

Applicable components: Splunk Enterprise and Splunk Universal Forwarder
Applicable OSes: all
Version introduced: 6.6

The autoLB setting, which controls how universal forwarders send data to indexers, and which only had a valid setting of true, has been locked to that value. Since auto-loadbalancing is the only way that forwarders can send data, there is no longer a reason to make that setting configurable. Universal forwarders now ignore attempts to configure the setting to anything other than true.

You might notice an error about a bad configuration for autoLB during the startup check. You can safely ignore this error.


Investigation

You will see the error appears every time the Universal Forwarder was restarted. Checking the documentation you can find that the autoLB attribute is no longer configurable due to the only valid setting is true, so since version 6.6 the attribute was locked to that value.

Resolution

The message can be safely ignored, however, to make it stop appearing you need to remove the attribute and it's value from the path that appears in the message and then restart Splunk.


 
Splunk Documentation

The 'autoLB' universal forwarder setting in outputs.conf is no longer configurable https://docs.splunk.com/Documentation/Splunk/latest/Installation/AboutupgradingREADTHISFIRST#The_.27autoLB.27_universal_forwarder_setting_in_outputs.conf_is_no_longer_configurable

Revision History

Revision Publish Date Comments
1.0
28-Sep-2026
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products

Related Articles