Hello, there is a mistake up there on the pkg install ..... It is as simple as pkg install splunkforwarder since the publisher and has already been setup ... View more

source=Contacts.csv | join "Company Name" [ search source=Accounts.csv | rename "Account Name" as "Company Name" ] | join Email [ search source=Attendees.csv ] | stats dc("Full Name") as "Attendee Count" by "Sales Representative" ... View more