Hi Team, We are frequently seeing dispatch directory messages in the splunk GUI. Show please help me how to handle it in a right way with some permanent solution. Also, we have an idea that we can increase the threshold limit, so help me correctly how to increase the threshold limit so that we could stop seeing these messages in near future. Regards, ... View more

Hi Team, The issue is like we have duplicate in the summary index, where from single host multiple same records are available. Looking for a very quick help. I would require "query to remove duplicates from the summary index" Thanks in advance. Regards, Prakash Mohan Doss   ... View more

Hi Team, After the upgradation to splunk version 8.2.2.1, we have started seeing "warn" in the one specific dashboard with warning as "cannot expand lookup field 'triggertype' due to a reference cycle in the lookup configuration.check search.log for details and update configuration to remove th reference cycle". I have seen others splunk community answers for field userid. But i would like to know the exact resolution for this triggertype field. Regards, ... View more

Hi, could you help me with the above subject !! For a customized power-role edit permission is not available in the dashboard. When that power-role is provided with "admin all objects" capabilities, edit permissions are enabled. How can a customized power role do the edit permission in the dashboard without providing the "admin all objects" capabilities? Thanks in Advance. ... View more