Sort of non-numeric fields is done lexicographically. It can be ascending or descending. If you want the columns sorted another way, you may have to add another field, possibly based on the name, which can then be sorted by, and then removed. ... View more

Hi @rasikmhetre , You can add 'secret key' for the addon in the 'passwords.conf' file. The password will be encrypted once you restart the Splunk service.  Can you explain the issue that you are facing with CLI? ... View more

Have you tried the fix suggested here?  https://community.spiceworks.com/topic/2222892-search-adminauditlog-need-to-enable-tls-1-0-to-work-correctly ... View more

was able to get it working with the following setting in server.conf [applicationsManagement] sslVerifyServerCert = false   ... View more

I was able to get it working with the following setting in server.conf [applicationsManagement] sslVerifyServerCert = false   ... View more

In a second try it suddenly works. I am not sure if I just was impatient or I have overseen something when I configured it the first time... ... View more

Here is a sample using the windows specific modular input splunk-winevtlog.exe's .conf file: [default] host = Win2k8sup04 [WinEventLog] _meta= global::fromUF-master [WinEventLog://System] disabled = 0 _meta= test::SystemUF [WinEventLog://Security] disabled = 0 [WinEventLog://Application] disabled = 0 _meta= test::ApplicationUF global::fromUF The behavior in this example is: The System stanza gets only one field test (it overrides the default). The Security stanza gets only one field global (as set by default) The application stanza gets both fields test and global (it overrides the default). ... View more