Has anybody experienced installing xmlutils app in Splunk clustered environment? I receive below error with 'xmlprettyprint' command only shcluster installation:
[myindexer1insite1] Search Factory: Unknown search command 'xmlprettyprint'.
[myindexer2insite2] Search Factory: Unknown search command 'xmlprettyprint'.
thanks up front for your time.
You'll need to either install it on the indexers, or use localop to force it to run on the search head. Assuming you're only formatting a small number of events, this second option should be fine.
View solution in original post
Thanks Vbumgarner, this is the answer.