Hi @jeremeek  I have an issue where out ASA's are filling out our license, so i would like to filter some of the data away. I found your post here, and im hoping you are still active. What data did you decide to filter out? ... View more

Thank you so much for suggesting the use of mvrange and mvexpand! I was looking to get dummy days between each log entry and with use of mvrange, mvexpand and delta functions I was able to achieve just that 🙂 Thanks again! ... View more

I also had the add on enabled, I can't prove this was the cause as I no longer have access to the environment so as good an answer as we're going to get from @tlelle! ... View more

Have you opened up port 8000 in an EC2 Security group? Splunk automatically enables splunkweb, so you shouldn't have the need to create a web.conf file. ... View more

Sorry, meant, I saw no issues with props, not new. ... View more

Check the License Usage Report View http://docs.splunk.com/Documentation/Splunk/6.2.5/Admin/AboutSplunksLicenseUsageReportView like @acharlieh suggested ... View more