I need to change the owner of a search or dashboardview. Using the deployer merges changes from local.meta back to default.meta on the SHC members when the bundle get distributed and the original l...
After I moved all my apps to my new SearchHead Cluster per the documents, I am getting the following when going to my app:
"Splunk cannot find theview 'homepage' "
However, the app was c...
We have a dashboard that I would like to use tstats to generate the data, and run a search ever 2 minutes using tscollect.
The problem I have discovered is that since each searchhead in the p...
...eing sent/received and puts a lot of load onto thesearchhead.
Observed behaviour
This behaviour does not occur when viewing the report directly
I was unable to replicate this using a q...
Hello everyone, I have a problem with dashboards and I hope that someone could help.
I want to add a picture to my dashboard that I have created based on thesearch app , how can I do that ?
The...
...nyone can help, even if it's extra debug steps, that would be great!
Background
I developed a dashboard application with 2 views using a standalone searchhead to test and then deployed the custom a...
...ad access to delete and change objects from any searchhead in the pool. Now, the SHC promotes artifacts from local to default, and users cannot, for example, remove an unwanted dashboard. Or update a...
So we needed a view where we had the default search look and capabilities but within the "chrome" or look and feel of the app we were creating. I searched high and low through the documentation but the...
I have Splunk 8.0.5: One cluster master One Searchhead Two indexers to host clustered indexes I am logged into the UI of thesearchhead and have the admin role but I cannot do any of the...