I am seeing this on 8.1.1. ... View more

Hi @sramiz, Don't worry, yes correct. You can refer to the below document. https://docs.splunk.com/Documentation/Splunk/8.1.1/Updating/ConfigureDeploymentClients#Configure_deployment_clients   ... View more

Hi @sramiz , This warning is harmless.  It should be fixed in a future maintenance release of 8.1. Cheers,    - Jo. ... View more

hi @scelikok Thanks for your reply but its not about deleting index or retention period. I want to know if there is a way for UF to ignore any logs that are older than 30 days and if this setting can in place from indexer cluster not in UF's inputs.conf. thanks again ... View more

Thats correct. it worked for me when I used splunk command as splunk user without sudo. thanks ... View more

@sramiz , you will actually want the Website Monitoring App installed on a Heavy Forwarder; as @richgalloway indicated, AND your searchhead. The app on the searchhead will provide the visualizations for the results coming out of your indexed data. You need to make sure that the permissions for Data Inputs is set so that noone is able to create a new web_ping input on your searchhead and you are managing those on your Heavy Forwarder. ... View more

worked... thanks a lot Iguinn and fdi01... I got it working with the combination of your suggested solution.... thanks again.. cheers SR ... View more

You have a dangling jmxserver closing tag. </jmxserver> ... View more