yes I am sure   ... View more

same path used for inputs.conf file and I can see logs from that data source in the UI ... View more

I am using the following configuration, but still can't see it [Gurobitest] # send an email notification action.email = 1 action.email.to = <my_email_address> action.email.useNSSubject = 1 alert.suppress = 0 alert.track = 0 cron_schedule = 0 23 * * * counttype = number of events quantity = 0 relation = greater than #search for results in the last day dispatch.earliest_time = -1d dispatch.latest_time = now display.events.fields = ["host","source","sourcetype","latitude"] display.page.search.mode = verbose display.visualizations.charting.chart = area display.visualizations.type = mapping enableSched = 1 request.ui_dispatch_app = search request.ui_dispatch_view = search search = sourcetype=gurobi_expiration ... View more

I create it under /opt/splunkforwarder/etc/apps/gurobi/default/ ... View more