Hi @inventsekar  One of the UF on my host was down, CPU and Memory details of that host is not captured  during that down period once the UF started. Why is it so? ... View more

@aditsss Recently one of our user had faced the same issue. The reason behind that was the UF was not installed Properly.  Make sure your getting data from the UF to your splunk instance. In our case the outputs.conf on UF was not defined with correct port number. Once the port number defined on outputs.conf was corrected(receiving port number :9997) ,the error was removed. ... View more

@atammana_splunk Thank you.I have shared the details to the mentioned email ID.  ... View more

@gcusello @woodcock  @atammana_splunk Any suggestions Please? ... View more

@thambisetty I am upgrading splunk to 8.0.6 version from 7.0.My current python version is 2.6.6. As i read python 3.7 is compatible with 8.0.* version. So do i need to install python 3.7 on my latest splunk version 8.0.6 OR does python 3.7 comes embedded in splunk 8.0.6? I read in few of the splunk community links that "Splunk Enterprise ships with its own bundled Python. In case, 8.0.x ships with Python 2.7 and Python 3.7 and no need to install python separately" Could you please help me understand whether splunk 8.* comes with python 3 package?   ... View more

@inventsekar Our server is a standalone server hence had placed it under etc/apps/search/local/props.conf. The below suggested props.conf is working as required!Thank you! ... View more

@inventsekar It didnt work.I tried adding 'g' it still captured only first word of my file and replaced it with word 'splunk' ... View more

@inventsekar I tried your solution but it didn't work.The field was still in random order. However i tried the below code and it worked for me | eval EPOCHDATE=strptime(DATE,"%Y%m%d") | sort -EPOCHDATE | eval EPOCHTIME=strptime(TIME,"%H%M%S") | sort -EPCOHTIME | eval DATE=strftime(EPOCHDATE,"%m/%d/%Y") | eval TIME=strftime(EPOCHTIME,"%H:%M") | eval DATE&TIME=DATE." ".TIME ... View more

@ITWhisperer It Worked. Thank you! ... View more

@ITWhisperer  Thanks for the response. I tried above code but when i load the page initially both my check box A and B are checked(which is supposed to be) still i get the label as "choose any option" and panel 1 and 2 are not displayed until i check and uncheck either A or B check box   <input type="checkbox" id="checked_box" token="checkbox"> <label>$noneselected$</label> <choice value="A">A</choice> <choice value="B">B</choice> <change> <condition match="isnull($checkbox$)"> <set token="noneselected">Select atleast one Checkbox</set> <unset token="B"></unset> <unset token="A"></unset> <unset token="AB"></unset> </condition> <condition label="A"> <set token="A">A</set> <set token="noneselected"></set> <unset token="B"></unset> <unset token="AB"></unset> </condition> <condition label="B"> <set token="B"></set> <set token="noneselected"></set> <unset token="A"></unset> <unset token="AB"></unset> </condition> <condition value="*"> <unset token="B"></unset> <unset token="A"></unset> <set token="AB"></set> <set token="noneselected"></set> </condition> </change> <default>B,A</default> <initialValue>B,A</initialValue> <delimiter> </delimiter> </input> ... View more

@thambisetty  Thank you your answers helped me 🙂 I have few doubts on the Monitoring console License page. Todays' s License GB panel is it represents the average the License used by only indexers  in day,Since license is metered only for the ingested data? Is so ,then by using the above query which you gave to calculate the license used by h(in my case i gave indexers as host) the results does not match with the average results present in "Todays' s License GB panel" License usage in previous 30 days panel shows the data of only previous 4 days data. Type=rolloversummary.   Is there any query which i can use to calculate the license used by each indexer per day ?Or any document to understand  License page in MC? Cheers! ... View more

@renjith_nair Thank you:)It worked ... View more