My team was able to get this to work through the backend, too. Another thing to add here is that I kept getting this error when my SQL query started with "EXEC." When I asked the user for a query that started with "SELECT" because most of our other queries start with that, I stopped getting the error and it worked. I do not know enough about SQL to speak to the significance of this difference, but this is the behavior we are seeing. Splunk seems to take EXEC on the backend but not in the UI, and SELECT in the UI works. ... View more

Please I have an ssl from the Kafka team for me to install on splunk. What configuration file should call this very from please?  ... View more

I suspect you were rejected when requesting a 50GB Dev/Test license using this link: https://splunk.com/dev-test These licenses are only available to users who are associated with an account with a paid Splunk Enterprise or Splunk Cloud entitlement. The license approval process for 50GB Dev/Test licenses is completely automated, so if you feel this rejection was in error, you'll need to contact your Splunk sales representative. The 10GB Developer license (available here: https://dev.splunk.com/enterprise/dev_license ) is available to everyone for non-production use - it doesn't have the same restriction as I suspect led to your rejection previously. Licenses are typically approved within 2-3 business days, but if you haven't heard back by then, please contact us at devinfo@splunk.com ... View more

I never heard of prof.conf but in any case, you should ask your own new question. ... View more

Go through it :. https://wiki.splunk.com/Community:MoveIndexes ... View more