How do I get the dashboards to show indexes other than "main"? All of my data flows into indexes by location so the default dashboards or home screens for Splunk and the Windows app show no events. Is it possible for them to show events across multiple index files?
Never mind, I found it in the related questions section after posting, this was the solution:
http://splunk-base.splunk.com/answers/1563/windows-app-and-multiple-indexes
Never mind, I found it in the related questions section after posting, this was the solution:
http://splunk-base.splunk.com/answers/1563/windows-app-and-multiple-indexes