I have installed splunk app for puppet. But all the resources field shows 0 and Puppet Runtime Over A Week & Puppet Resources Over A Week shows "No results found.".
Also I am not sure where its pulling puppet data from, whether from splunk machine or puppet master. For me puppet master is in different node, not in splunk node.
From where its searching data..
I could not find enough documentation on this. Someone please help me!!
Try removing "daemon." (remove the '.' also). Certain versions of puppet don't contain daemon in the strings. I've had to customize most of the searches.