Does anyone know how to set-up saved serarch to generate RSS feed that includes the actual event contents or specific fields?
Current RSS feed just provides number of event counts instead of actuall contents or specific fields of the event.
I use Sage (Firefox 3.6 RSS add-on). When I click on the RSS links, it asks me to login and then displays the actual event contents in the splunk> Search page.
Using Splunk 4.1.5
