i installed the *NIX App, then i chose to monitor /etc of the linux Splunk is installed on. i tested it, modified a junk.conf file 8 times within 15min period. the *NIX App says there were 8 changes but when i click the file path it opens the Search with a Diff in there but the results are null. why? i am doing this as Admin and the OS index is in my default search for the role, etc.
also, there are more problems with this app. i goto Configs >>> Config Files Overview, then on left i change to a Count sort, find the file i am interested in, click it, a search opens but finds nothing, there's a quoting problem, after i click the file i want the serach adds a space between last char of file and ending quote, i get no results, but if i remove the space the search works. in fact, this quoting problem exists when any click opens the search in this app, etc.