Indeed, "latest" should be on 9.2.1, but it seems to be on 9.0.9 . Perhaps we can ping the resolver of that post @amayor_splunk and humbly ask for assistance. ... View more

I noticed after posting this customization to the TA-ubiquiti add-on that my references to the inputs.conf, props.conf, and transforms.conf files were missing the "local" sub-directory. 🙄 I have not uncovered a way to update my original post, so here is what those file references should actually look like: In ~/etc/apps/TA-ubiquiti/local/inputs.conf: In ~/etc/apps/TA-ubiquiti/local/props.conf: In ~/etc/apps/TA-ubiquiti/local/transforms.conf, I added the following two stanzas: This documentation error should not have caused an issue for anyone that has used Splunk for any length of time. But hopefully did not cause trouble for anyone new to Splunk that attempted to follow my procedure. 😟 Cheers. Ed ... View more

Hi @edlarsen! I'm the PM for Stream, and while we've done some work with HSL in-house, we don't have a standard configuration that we recommend for the HSL vendor extensions. Is that something you'd be willing to share with the community or directly with the Splunk team? ... View more

Mikael, Thanks for the quick response. Based upon a brief review of your App and and some past experience with the Cisco wireless products, I suspected this might be the case, but thought it was worth posting a question to get an authoritative answer. Given that our Network Operations team have already expressed an interest having some "direct visibility" into the lightweight AP device inventory, I might investigate the possibility of assembling a solution for that request. Regards, Ed ... View more