Hi @seetharamanss I have this exact same issue. What do you mean by "working fine after removing the appserver content from my new app." ? What do you remove? I have cloned the dashboard to the search and reporting app and the xml disappears, but when i try to move it to the current app it is in .. the xml shows up again. Thanks. ... View more

Hi, is there an answer to this proboleme? ... View more

Thank you . It worked ... View more

Hi lads, i am having a similar issue. I have multple panels just doing a stats count to see the number of events. But i want to be able to compare those events for the previous 24 hours and only weekdays. Is there anyway you could assist? thanks C. ... View more

The order of indexing should not affect the extraction process. From the above configuration, it more looks like an indexer time extraction and for that you have to place the configuration on indexers. If you just want search time extractions, try with splunk web http://docs.splunk.com/Documentation/Splunk/6.4.1/Knowledge/Managesearch-timefieldextractions If you still want to do search time field extractions using config files, refer to http://docs.splunk.com/Documentation/Splunk/6.4.1/Knowledge/Createandmaintainsearch-timefieldextractionsthroughconfigurationfiles Also remember, whenever you do configurations using files, then you need to restart splunk and with the web, it's not required. ... View more

Hi @seetharamanss Please don't forget to resolve this post by clicking "Accept" directly below @somesoni2's answer. ... View more