I assume that you execute the org_all_indexes.spl file via manage applications and install from file. I did this, and it now shows up in the applications list, but I don't see any new indexes. What is the proper way to execute the file?
Hi jon,
Late response I admit. I installed the .spl as you indicated and found after following all steps, restarting Splunk and configuring a data input that I now have 12 new indexes created by the org_all_indexes app.
