in classic dashboards - I could schedule a pdf of a dashboard to be sent to me daily but I do not see that option in dashboard studio? where is that option??   Rich ... View more

The doc mentions IT Essentials Work. Tried to download IT Essentials work but I get an error message during installation. "App Installation failed" "invalid app contents: archive contains more than one immediate subdirectory: and DA-ITSI-DATABASE" I still have the "Splunk add-on for amazon web services" version 5.1.0 running on a heavy forwarder collecting the data and sending it to my indexes on splunkcloud...   (5.2.0 is broken) ... View more

I have a redhat 7.4 syslog-ng server with splunk heavy forwarder(8.1.2)  installed. server is TZ EST Server collects udp/514 logs from multiple networking devices and writes them to textfiles like ... /syslogs/todays-internetfirewalls.txt /syslogs/todays-routers.txt /syslogs/todays-switches.txt splunk Heavy Forwarder has data/file monitor inputs for the various text files and are assigned to the appropriate index with the appropriate sourcetype so some network devices sending udp/514 syslogs to the above server are in different timezones but the entries in the text file written do not adjust for timezones... example screen attached - In screenshot IP 172.24.63.88 is GMT and 172.24.3.5 is EST I researched and tried to create an app called Timezones on the HF with a local/props.conf file that just lists... [host::172.24.63.88] TZ = GMT but when file data is ingested the _time for the IP in GMT is same as it appears in the log file entry with no adjustment to bring GMT time to EST time?? any help would be appreciated - I have read several links already and follow a few answers... https://community.splunk.com/t5/Dashboards-Visualizations/Multiple-Timezones-search-worldwide/td-p/91339 https://community.splunk.com/t5/Getting-Data-In/Multiple-time-zones-in-props-conf/m-p/286456#M54667 https://docs.splunk.com/Documentation/Splunk/latest/admin/propsconf Rich ... View more

has anyone had success in installing UF Version 7.x or 8.x 32bit on a windows server 2008 OS some R2 some not - we have a couple servers for an old legacy application company still needs in an isolated and protected environment (legacy application not supported by vendor anymore) but they are still running old UF 6.3.8 32 bits and we have had issues with the servers when trying to upgrade to newer UF 32 bit versions... currently forwarding data to an on-prem Heavy forwarder running splunk 7.3.7 and forwarding to splunkcloud. Unfortunately the legacy application cannot be installed on server 2012 and we are stuck with 2008 32 bit we tried several options to upgrade on test server OS to 2012 and app just won't run... any known versions of 8.x running 32bit 2008 server (not supported by splunk 8.x) thanks in advance for all replies... ... View more