I guess Splunk don't support Splunk or Splunk Works developed apps now. ... View more

thank you for your input. Both variants work and i learned something new 🙂 ... View more

I was having an issue with this as well, till I searched further back in the past.  I am running into a problem with the Time stamp not getting the Received time.  I am looking in the props.conf to see if I can fix it. ... View more

Putting the props.conf on the indexer fixed my issue.     ... View more