I am very honored to be part of this cohort/splunktrust. Congratulations to all who made it to the cohort.  ... View more

Also our team has tested various date formats and that get impacted after 2020 Jan. The utcepoch time only gets impacted after Sep 23. 2020 but it's better to fix all before Jan 1, 2020. Here is the link : https://www.bitsioinc.com/general/splunk-datetime-xml-year ... View more

@niketnilay thanks for detailed code, although the single values are derived from different search logic, I can combine results to bring them into table format. But for the section 4 which has 6 rows, I want to divide that into 3 different rows. Because section 3 of dashboard numbers related to two numbers on the right from Section4. Please check attached https://imgur.com/K2jecRb ... View more

Sorry above link expired , here it is again https://imgur.com/kdBP8KO ... View more

@landen99 our company came up with this for our custom polos:) It's not exactly specific to any App as you asked, sorry. Eat. Drink. Splunk. Repeat. ... View more

I just figured out, turns out the time on the linux vm is a day off from desktop date-time, the search-head is installed on linux vm, once I set the correct date-time on linux vm, there is no warning.. hope this helps someone. ... View more