First of all @kamlesh_vaghela Thank you so much for trying to help, But we can't enter in: mySearchResults.on("data", function () { resultArray = mySearchResults.data().rows; // Iterate Result set $.each(resultArray, function (index, value) { console.log(index, value) console.log(index, value[0]) console.log(index, value[1]) console.log(index, value[2]) }) });    We can get the action and the results of this Data. Thanks again

See if this helps index=error-data sourcetype=error:logs source=https://error:appliocation.logs ("logs started" "tarnsaction recevied") OR (" timeouterror" AND "failed logs confirmed ") OR (" application logs continuted") [|inputlookup append=t errorlogs.csv where error=2 |fields host |format] | eval initialError=if(searchmatch("logs started" AND "tarnsaction recevied"),1,0) | eval transLogs=if(searchmatch(" timeouterror" AND "failed logs confirmed "),1, 0) | eval Failed=if(searchmatch(" application logs continuted"), 1,0) |stats count(eval(initialError=1)) as "initial error logs ", count(eval(transLogs=1) as "logs in transactions", count(eval(failed=1) as "total failed"

@alvesri  It should work. Can you please just compare your code with my code. var mySearch = mvc.Components.get("mySearch"); var mySearchResults = mySearch.data("results"); mySearchResults.on("data", function () { resultArray = mySearchResults.data().rows; // Iterate Result set $.each(resultArray, function (index, value) { console.log(index, value) console.log(index, value[0]) console.log(index, value[1]) console.log(index, value[2]) }) });   I hope this will help you. Thanks KV If any of my replies help you to solve the problem Or gain knowledge, an upvote would be appreciated.  

Hi, @PickleRick @gcusello  When I tried to refresh/debug inputs.conf using btool in deployment server , I can see the below errors. Refreshing admin/collections-conf RESTException [HTTP 503] [{'type': 'ERROR', 'code': None, 'text': 'KV Store initialization failed. Please contact your system administrator.'}] Refreshing admin/deploymentserver SplunkdConnectionException Splunkd daemon is not responding: ('Error connecting to /servicesNS/nobody/search/admin/deploymentserver/_reload: The read operation timed out',) Refreshing admin/ingest-rfs-destinations SplunkdConnectionException Splunkd daemon is not responding: ('Error connecting to /servicesNS/nobody/search/admin/ingest-rfs-destinations/_reload: The read operation timed out',) Refreshing admin/serverclasses SplunkdConnectionException Splunkd daemon is not responding: ('Error connecting to /servicesNS/nobody/search/admin/serverclasses/_reload: The read operation timed out',) How we can trouble shoot this ERROR Messages ??    

Wait. What do you mean? You're editing the app on DS? Then you have to reload the deployment server (you don't have to restart it) so that it notices a new version of the app and offers it to the forwarder(s) for download. Also: https://docs.splunk.com/Documentation/Splunk/9.1.1/Admin/Inputsconf#Event_Log_allow_list_and_deny_list_formats

Regexes in blacklists can be tricky sometimes. btool will just show you what is the effective config you just wrote so it won't show you if it works or not. I assume you restarted your forwarder after configuring the blacklist. Anyway, you should not enclose the blacklist parameter in quotes.

Hi @Claudia.Landivar , it is because of the fire wall setting in the machine agent which restricts the machine from connecting to server , then we used this command to resolve it  cscript InstallService.vbs -Dappdynamics.http.proxyHost=proxy1-***.***.com -Dappdynamics.http.proxyPort=8080 -Dappdynamics.http.proxyUser=user -Dappdynamics.http.proxyPasswordFile=D:\machineagent-bundle-64bit-windows-23.7.0.3689\password.txt

Hi @sivakrishna  instaed of changing rhe port, if 8191 is already used by splunk then please kill  and start the splunk have you checked which process using 8191 , if you wan the change the port , you need to change port on rest search heads, which is not recomended 

Thanks for the reply!!   can we change the port for this server?? What will happen if i change the PORT for this single server when it's in the cluster? Remaining 3 servers are running on the 8191 PORT.

Hi @sivakrishna  it seems KVstrore port 8191 is used by other application. can you check which process using 8191 port , ps -ef | grep -i 8191  if is used by other application check with os team to check and ask them use other port,  then you can start splunk and kvstore will start on port 8191

update for this case: specify the server want to collect, in my example is dc-tdi-redis02 here is full path Application Infrastructure Performance|Root|Individual Nodes|dc-tdi-redis02|Custom Metrics|Redis|dc-tdi-redis02|Clients|blocked_clients when i try select from Hardware resouces, it will show: Hardware Resources|CPU|%Busy so let remove "Application Infrastructure Performance|Root|Individual Nodes|dc-tdi-redis02|", it will work now Thanks everyone!!! Phucdq from Vietnam with love!!