I can't get the app to work at all. We have a syslog server that forwards logs to our indexer. I have the Clearpass app installed on our Search Head. I've followed the instructions in the PDF, but I can't get my dashboards to populate. The logs are going to the index, the source type is correct, I see the event types beginning with cppm, and I've enable to the system to check the index by default. I keep seeing this cphost argument, but it's not in the logs. I don't know what else I can do at this point.
