Hi all I have an addon plugin that utilizes REST API to obtain specific logs; each generated event has fixed values for both source and sourcetype. Now there are customers who use props.conf and transforms.conf that will change the value of the source according to a particular column within an event; for instance, if the service is 'a', then the source changes to 'service_a'; if service is 'b' then it changes to 'service_b'. The current problem is that obtaining logs works fine, and content can always be found using sourcetype. But when using transformed source to search, events cannot be found even though events with 'service_a' and 'service_b' are visible.   How should I adjust the addon or how should I configure local settings so that I can search using source?   Regards Emily ... View more

hi   I want to how to change from the archive state to active of splunkbase site. I have already submitted a new version of  the addon file. The addon is still in archive status. ... View more

How to get proxy setting during python helper[validate_input] for Data Input in splunk addon ... View more

Hi During validate_input, I want to check the request if it's ok. But when I add datainput and save ,  the error show:   Need help about the error.   Thanks emily ... View more