Thanks worked! ... View more

fantastic! worked like a charm. Was unaware I could use sed. It's a good day when you learn something new! Thank you for quick reply and solution.   ... View more

Use the Deployment Monitor app and you'll find a dashboard with details that should help. You may just need to enable it in your current deployment. Go to Manager -> Apps and see if it's already in your list. Enable and restart. Otherwise download it from Splunkbase. http://splunk-base.splunk.com/apps/22301/splunk-deployment-monitor ... View more