Try changing the app configuration. In the Web intlligence app, go to setup. In the sourcetypes field, put the name of the index that contains your web logs. Example: instead of sourcetype=access_combined put instead index=yourweblogs. ... View more