Hi, Can you explain more on this statement : "Yes, the workaround will make the acceleration feature less useful, because only older events will be accelerated, and for recent events, they will be based on regular search results." Is it referring to DM acceleration? If yes, does it mean that the DM will not be up to date ? ... View more

hi @BrendanCO, Correct web.conf is at $SPLUNK_HOME/etc/system/local/web.conf ... View more

Hi , Am using Splunk Enterprise Version:7.3.3. Still cant see drop down option for my saved search report even though I use below lines in my savedsearch.conf file.   action.summary_index = true auto_summarize.dispatch.earliest_time = @w0 ... View more

you can use the app MIME Decoder Add-on for Cisco ESA  to decode mime header 🙂   .But I can't solve it with encoding "gbk" ... View more

Has there been any updates to this issue using DB Connect 1 or 2? ... View more