First, try to add console.log("hello") to your js file to see if it prints "hello" to the console. If it is, that means the js is loaded. Second, if you are doing some DOM manipulation, for example $('.splunk-table'), then it may not work in 6.5 because the class name changed. In this case you can first add an id to the element which you want to edit in SimpleXML, for example <chart id="nice_chart"> , then you can do $('#nice_chart'). ... View more

I don't understand why the DMC is trying to push a bundle to the Region 2 indexer. I think the "bundle push" here refers to the search knowledge objects replication, which is expected, because DMC needs to do ad-hoc search against that indexer to monitor that indexer. Here's the docs talking about what happened: http://docs.splunk.com/Documentation/Splunk/6.3.3/DistSearch/Whatsearchheadssend Basically, DMC monitors other splunk instances by doing ad-hoc searches (to get historical data from log events and current data from REST endpoints) against the splunk instances being monitored. In your case, the Region 2 indexer is a distributed search peer of the DMC instance. So, when DMC starts a search, it will send the search knowledge bundles to the Region 2 indexer in order to complete the search. Please note that the concept of "bundle push" in this context is different from the concept of "app bundle push" or "configuration bundle push". Search knowledge objects bundle push happens when a search head starts a search against it's distributed peers, while "app bundle push" or "configuration bundle push" happens when you want to deploy some apps or configurations (typically from cluster master or deployment server) to some splunk instances. ... View more

I assume what you are asking is, why the indexers don't show up. make sure your DMC instance is a search head of the indexer cluster. Go to Settings -> Indexer clustering -> enable clustering, then choose mode as "search head" and point to the cluster master, then restart. go to Settings -> Distributed search -> Search peers, verify that the indexers are listed as peers on this page. go to DMC setup page, now the indexers should be listed here, make sure they have the "indexer" server role. Then click "Apply Changes" button. Note clicking the "Apply Changes" button is important! Now the overview page should show a new panel for the indexers and the indexing related dashboards should work. NOTE: since your deployment is indexer cluster + search head cluster, please make sure the DMC is a search head in the indexer cluster while NOT being a search head cluster member. In another word, the DMC needs to be inside indexer cluster, and outside of search head cluster. ... View more

This issue occurs when your splunk has multiple license pools. It will be fixed in next release. ... View more