When i am trying setup the Splunk Add-on for Amazon Web Services after configuring the Cloudtrail, SQS and SNS, I was encountered with the following: error while trying to update: Splunkd daemon is not responding: (u'Error connecting to /servicesNS/nobody/Splunk_TA_aws/apps/local/Splunk_TA_aws/setup: The read operation timed out',) help me to solve this..... ... View more

i wanna know how to display the result after specifying an if condition. the sample search is like : index=xyz | order="0000" | eval Order_status=if(order!=0,"found","not found") | ..... after this condition, if order=found, I need to display a table with few fields....please help me to solve this. ... View more