Resources 0 and results not found

[roopa333]

I have installed splunk app for puppet. But all the resources field shows 0 and Puppet Runtime Over A Week & Puppet Resources Over A Week shows "No results found.".

Also I am not sure where its pulling puppet data from, whether from splunk machine or puppet master. For me puppet master is in different node, not in splunk node.

index=* puppet-agent daemon.error main | transaction host | table host | rename host as "Puppet Client"

From where its searching data..

I could not find enough documentation on this. Someone please help me!!

[carmitstead]

Try removing "daemon." (remove the '.' also). Certain versions of puppet don't contain daemon in the strings. I've had to customize most of the searches.