What happens when you run that command on the command line: "C:\Perl64\bin"\perl "E:\splunk\etc\apps\afterglow\appserver\modules\AfterGlow"......\afterglow\afterglow.pl -c "E:\splunk\etc\apps\afterglow\appserver\modules\AfterGlow"......\afterglow\sample.properties -a -e 1.2 | "C:\Program Files (x86)\Graphviz2.38\bin"\neato -Tgif -o "E:\splunk\etc\apps\afterglow\appserver\modules\AfterGlow"....\static\afterglow1523386915.320.gif -Tcmapx -o "E:\splunk\etc\apps\afterglow\appserver\modules\AfterGlow"....\static\afterglow1523386915.320.map i am a bit suspicious of all those dots in there. they might be wrong... they should be separated by a backslash, but try the command and see what happens. ... View more

One more thing... Make sure you have Text::CSV installed on your machine. This seems to be the most common problem. On Ubuntu: sudo apt-get install libtext-csv-perl ... View more

Latest update on this. Try adding the full path for the 'neato' binary! I have seen it not work because neato was not in the path. Here is what to change: AfterGlow.py:78 output = os.popen(localCommand + " | /usr/local/bin/neato -Tgif -o " + os.path.join(TARGETDIR,imageName) + " -Tcmapx -o " + os.path.join(TARGETDIR, mapName),"w") Make sure that the path you are adding for neato is actually correct (run 'which neato' to find where it lives). This should fix the problem. ... View more

The AfterGlow application had to be updated to work with Splunk 4.2.x. There is a new release as of January 5th 2012 (version 1.6.2) which works with Splunk 4.2.x! Please DOWNLOAD THE NEW RELEASE! Also do not read the instructions in the Splunk blog entry about how to make the application work. Read the README file that comes with the app and is places in $SPLUNK_HOME/etc/apps/afterglow/README. You basically have to change two parameters in the AfterGlow.py file (AFTERGLOWLOCATION and AFTERGLOWPARAMETERS) to make things work. See you on http://secviz.org! ... View more

The AfterGlow application had to be updated to work with Splunk 4.2.x. There is a new release as of January 5th 2012 (version 1.6.2) which works with Splunk 4.2.x! Please DOWNLOAD THE NEW RELEASE! Also do not read the instructions in the Splunk blog entry about how to make the application work. Read the README file that comes with the app and is places in $SPLUNK_HOME/etc/apps/afterglow/README. You basically have to change two parameters in the AfterGlow.py file (AFTERGLOWLOCATION and AFTERGLOWPARAMETERS) to make things work. See you on http://secviz.org! ... View more

The AfterGlow application had to be updated to work with Splunk 4.2.x. There is a new release as of January 5th 2012 (version 1.6.2) which works with Splunk 4.2.x! Please DOWNLOAD THE NEW RELEASE! Also do not read the instructions in the Splunk blog entry about how to make the application work. Read the README file that comes with the app and is places in $SPLUNK_HOME/etc/apps/afterglow/README. You basically have to change two parameters in the AfterGlow.py file (AFTERGLOWLOCATION and AFTERGLOWPARAMETERS) to make things work. See you on http://secviz.org! ... View more