Yes, removing an app from the server class will cause the client to uninstall that app. ... View more

Thanks for confirming, but how silly.  PDF generation is a minefield with all the expected features it lacks. ... View more

I am seeing this across the whole of my Splunk ES 5.1.1/7.1.2 system - what version are you using, paddygriffin? ... View more

I removed the single hardcoded path since v1.0.1 (which is not related to this problem I think). But it is true that I didn't get it tested on Windows and I only tested it in two Linux boxes and one Mac because I don't have a Windows 8.1 copy for me to test 😞 I will try to find a Windows environment to test it later. ... View more

You can add max_searches=9999 or similar to the map command, otherwise it defaults to 10 , I think. ... View more

This revised regex should do the named capture from the sample string you provided backwardslashS(?lessthanpathddgreaterthan.+)tomcat7 Notes on modification to regex: changed to capture any non-whitespace character (S) before the literal value "tomcat7" also the named capture's name shouldn't contain a hyphen so changed it to pathdd tested against your supplied input string at regex101.com Match information MATCH 1 pathdd [1-58] home/jenkins/qa-automation-smcconnell/Automation/Tomcats/ Hope this helps with the regex part of the question. If you're working against input from an inputlookup command I believe someson12 is correct - in the rex command you need to specify the fieldname from the csv that you want to apply the regex to. sorry for some reason the capture name was edited out when i posted the reply, possibly because or the angle brackets - i've replaced them with "lessthan" and "greaterthan" here, also the backslash at the beginning ... View more

How exactly are the parameters passed to the Python script? Also - is there a way to let the user add some more info to the script (e.g. comment, Remedy ticket title, etc.)? Maybe open a dialog in the Splunk UI (I might be pushing it...)? And how do you get the logged in user to the Python script (to be the Remedy ticket requester)? ... View more

Hi, a. Write a new css called "dashboard-extended.css" and put the following snippet inside it @import 'dashboard.css' #dashboard{ background-color:; } b. copy this file to your SPLUNK_HOME/etc/apps/search/appserver/static folder. c. Go to your browser and hit the url http://: /en-US/debug/refresh. Click the refresh button. d. Go to dashboard page and do a Ctrl+F5 ,for full reload . You should see the changes. ... View more

Hmmm. Latest release is 7.2.4, not 7.4. Is that what you mean? If so, I see it's still valid as per the documentation. You may want to verify if you found a bug (try another environment or make sure it's not the specific dashboard) and if so, open a support request for validation of the bug. ... View more

answering my own! pilot error - I forgot I had the fieldformat for _time from the "non-timewrap" version I derived this from. So took it out [further simplifying the search] and got my x-axis markings...Sweet! ... View more

In addition [probably best after] the tutorial you will find the Splunk Book and its accompanying exercises [and yes, sample data] very useful. It's a free download from http://www.splunk.com/goto/book ... View more

Great clarification/ correction. Thanks! ... View more