I am trying to do this same thing. Can you clarify what you did to get this to work? The field name is URL and the string already has https so I was trying to just put $!URL$ in the url link configuration. ... View more

earliest time : -10m@m, latest time: @m, cron Schedule : Every 10 mins (*/10 * * * *) - This comment page has modified my cron impression to this. schedule window (I think, we are referring to Time window here) : In my opinion, it should not have any impact as my search has earliest and latest time, however, I have set it as "Last 15 mins". Search is set to run on cron schedule. ... View more

No luck in getting the data to splunk from azure? Any one getting it? ... View more

How about using below to show memory free timechart? index= host=HOSTNAME | timechart avg(mem_free_percent) ... View more