I havent logged into Splunk answers for a while now and now that I did its taken me to the wrong account but with the same username. If I search for my other username Dark_Ichigo I can still find all my previous questions and answers when I view that user but I cannot log in to it, for some reason I am logging in to the same user but a totally new and empty account, what happened? I didnt change my email address, nor did I change my password....I have no idea whats going on, Can someone please help me out? ... View more

I want to change the percentage results of the follwoing search into decimal based Percentages, as I want the 0.5% for example to show instead of just a 0% The following search: index="<index>" | eventstats sum(S1) as S1 | eventstats sum(S1) as S2 by seconds | eval S_final = S2*100/S1 | chart first(S_final) as S_Solution by seconds I also would like to know how to add the percentile Unit to the values, is that possible? ... View more

I would like to know the details of the defect raised for ResultsActionButtons not working in Splunk 4.3 as it is effecting my current reports and it would be good to have a defect number So i can follow it up and monitor its status of when it will be fixed. Does anyone know how or where I can find this? Or if I can contact anyone from Splunk? ... View more

I have created a summary index and a saved search to run via cron configured in saved_searches.conf, the only issue is that its not running at the specified time and if it managed to run, it doesn't fill up the summary index, UNLESS I manually click on "Jobs" and select the scheduled saved search thats running in the background and run it my self, then it will be successfully filled. What could be the reason for this behaviour? I have taken a look at some of the other questions but they dont seem to solve my issue. Below is a copy of one of my scheduled saved Searches: [Saved_Search] action.email.inline = 1 action.summary_index = 0 action.summary_index._name = Summary alert.severity = 2 alert.suppress = 1 alert.suppress.period = 1h alert.track = 1 cron_schedule = 07 15 * * * description = <Description> dispatch.earliest_time = -29d@d dispatch.latest_time = now enableSched = 0 realtime_schedule = 1 search = `saved_search` ... View more

http://docs.splunk.com/Documentation/Splunk/4.2.4/User/RealtimeSearch#Real-time_backfill Realtime backfill, how is this implemented after its successfully configured? ... View more

I want to run a backfill script to populate my summary index, the backfill script runs everyday via a cron job. Can this be done without a backfill script and just a scheduled saved search with summary indexing enabled in savedsearches.conf? ... View more