Greetings for the Day !! I thought there might be a login issue, The Mail Id , Which you are giving It should not be Two Factor Authentication Enabled, in that case the Splunk unable be login to you mail ID to sent the alerts to Specified recipients. Check the Two-Authentication Disabled or Not. if it is mandatory you cannot disable it then you have an other option to create a app password for the login, you can use that Password instead of that Original Password. Thank you. ... View more

I restarted Splunk at the start, removed the Dashboard Example app and restarted Splunk again. Followed the install instructions from Splunkbase itself and it still does not work. Also checked their FAQ section around the app and can't find an answer there or the problem itself relating to the app. Oh well. I'll just start making my own dashboards via trial and error - best way to learn, right? Maybe if I'm feeling motivated at some point in the future I'll create a case to their support asking why it doesn't work. Thanks for your help again, Rich. ... View more

That worked, but I think I discovered a fundamental problem with my search. As I said, I'm really new to Splunk and didn't know I needed a search at the beginning before I did the stats command. What I did was:   "no phase found for entry" OR "no work order found" | stats count(eval(searchmatch("no phase found for entry"))) AS count_no_phase count(eval(searchmatch("no work order found"))) AS count_no_order   Before the pipe command, can I just search for anything? Or does it have to match exactly what I'm looking for in the searchmatch? EDIT: Also, it doesn't look like I can plot these results (50 for count_no_phase & 2 for count_no_order) on something like a pie chart after running that search. It splits them into a table format, but I'm not so sure how to get it onto a pie or line chart. ... View more

After spinning up a new VM and starting from scratch, creating the 9997 listening port in Splunk, enabling the firewall rules, and keeping all the default port configurations, it still does not communicate with Splunk Enterprise. I found this link which I've been reading through and following but it does not seem to help. I have already configured it as the documentation says. Not sure what else to try even after watching a LinkedIn Learning beginners guide on installing Splunk and the UF and not working from there either. Thanks to everyone for the help. Looks like this one is left a mystery on how to get Splunk to work! Thanks again! ... View more