Hi @Atriarc , my idea was to configure such a parser, maybe in the indxer before indexing. ... View more

That's what I will try to implement. Thanks for your answer ... View more

What commonality do the failing containers have with other failing containers, and how do the differ from containers that do not fail? ... View more

If you email me we can discuss live assistance with subject matter review or live exercises. I've been running a fairly big completely distributed cluster with community, Splunk Inc., and Premium add-ons for years; 90%security/10%ops focus. DustinMcCoyEE@gmail.com ~NorthEast SATX Update: ...Oh yeah, you got all the certs; LMK if you ever want to brainstorm actuals ~live. ... View more

I'll be there. I invited a few people but who knows if they will make it ... View more

The idea of how to approach is fantastic!  I'm familiar with location and is perfect setting after a workday to socialize and progress. I'm down! ... View more