To change the port you have to use the command "splunk set web-port 9000" (this is an example with 9000 port) Please check http://docs.splunk.com/Documentation/Splunk/7.0.1/Admin/Changedefaultvalues ... View more

Hi, we are having some problem. Where wich transforms.conf you edited: ./etc/system/local/transforms.conf ./etc/system/default/transforms.conf ./etc/apps/Splunk_TA_cisco-wsa/default.old.20170421-151119/transforms.conf ./etc/apps/Splunk_TA_cisco-wsa/default/transforms.conf ./etc/apps/maps/default/transforms.conf ./etc/apps/search/default/transforms.conf ./etc/apps/SplunkforCiscoIronportWSA/default/transforms.conf ./etc/apps/splunk_monitoring_console/default/transforms.conf ./etc/apps/cisco_wsa_reporting/etc/system/default/transforms.conf ./etc/apps/cisco_wsa_reporting/etc/apps/cisco_cws_addon/default/transforms.conf ./etc/apps/cisco_wsa_reporting/etc/apps/cisco_wsa_reporting/default/transforms.conf ./etc/apps/cisco_wsa_reporting/etc/apps/splunk_management_console/default/transforms.conf ./etc/apps/Splunk_TA_cisco-asa/default/transforms.conf Can you give one example before and after? Thanks! ... View more

I have this message but i dont have a Slave running. What could be the problem? ... View more

I have same problem, the result is empty audit_searchlocal | timechart sum(total_run_time) ... View more