@nagendra0911, try adding below to inputs.conf in local folder. disable_ssl_certificate_validation = true ... View more

You either enclose it in grave accents: `, or for longer code samples leave one line blank and indent each following line by four spaces. You can also write your code, select it and use the fifth button on top of the text box. ... View more

Chris, thanks for your answer about error messages. I know some people are using Splunk to review sourcecode, so I'm sure you are doing something similar internally as well. Perhaps that will help pull out those pieces of code that identify error messages for amplification. We'll be interested to see the improvements you speak of. Do you have any feedback on my more important question? Why is the very same rex query failing when used in a primary/subsearch context, but works fine when used alone in a single query statement? ... View more