1. Golden shovel for you 😉 You're responding to a 13 years old post. 2. <p> tag contains a paragraph of text. Linebreaks are not rendered and spaces can (depending on css settings) be squished together. Either split your text into multiple paragraphs (separate <p> tags), break the text with <br> linebreaks or indeed use a preformatted block. ... View more

Thank you. ... View more

Hi Try this guide, it helped me when i was hunting for a bonnie++ equivalent for windows. http://www.function1.com/2013/12/measuring-splunk-indexer-performance-with-iometer Thanks Darren ... View more

There is no efficient way to do this in Splunk, but pretty much you need: EventCode=whatever sourcetype=mysourcetype UserNameA=* UserNameB=* | where UserNameA!=UserNameB this will work, but won't run terribly quickly. ... View more

If you don't mind, please open a new Question asking this, and tag it with the CEE TA app tag by clicking this link: http://answers.splunk.com/ask/?appid=1742. I'll try to watch for it and answer there. ... View more