Splunk was recently upgraded from 5.0.4 to 6.1.1. Now when we open the Deployment monitor, in chrome it says unsupported app, you should have Splunk 5+ (But we are having 6.1!) Also a message comes in the message box saying maximum concurrent search reached. In IE , When I open Deployment Monitor application, the entire screen comes grayed, and we cant do anything with the application. What could be the issue? Is it some setting with the concurrent search or minimum disk space allocation? ... View more

We have a case where 4 log files are being monitored. Daily the log file is rolled to a back up and truncated at the end of the day. [monitor:///projects/Agent/runtime/logs/websphere1.log] index=nss sourcetype=NSS [monitor:///projects/Agent/runtime/logs/websphere2.log] index=rts sourcetype=NSS [monitor:///projects/Agent/runtime/logs/websphere3.log] index=nss sourcetype=NSS [monitor:///projects/Agent/runtime/logs/websphere4.log] index=nss One file or the other gest skipped daily as the data appears same to Splunk. I tried changing intCRClength to a higher value (around 750 bytes) but that doesnt seem to help either. Please help in fixing this issue. Thanks in advance ... View more