a change was made in 5.0.5 and later versions to improve security and prevent clickjacking issues, this is what you're running into. to implement this change, we set X-FRAME-OPTIONS=SAMEORIGIN in the header for all cherrypy served pages. this means that you can only iframe in pages coming from the same site. we added a new web.conf setting: x_frame_options_sameorigin = [True | False] which defaults to True. if you set this to False, your iframing will work again. ... View more

I couldn't find any way to force Splunk to accept newlines inside field names so this is as good as I could get; tack this on to the end of your search: ... | rename "Service Name" AS "Service" "Operation Name" AS "Operation" "Request Count" AS "Request" "Success Count" AS "Success" "System Fault Count" AS "System" | append [search index=* | head 1 | stats count | eval "Service" = null() | eval "Operation" = null() | eval "Request" = null() | eval "Success" = null() | eval "System" = "Count" | fields - count] | append [search index=* | head 1 | stats count | eval "Service" = "Name" | eval "Operation" = "Name" | eval "Request" = "Count" | eval "Success" = "Count" | eval "System" = "Fault" | fields - count] | reverse ... View more