Cool app, we're testing it on a system now. Unfortunately, said system is also using single sign on, which is why I think, our requests_requester user is showing "(splunk-system-user - )". Do you know how we could get around this?
Never mind, needed splunk_server=local in the search. Sorry.
View solution in original post
