We want to deploy an custom app via deployment server which has to execute an command in all the universal forwarders. We tried to create a app with the command but it is not reading the same and throwing warning message in splunkd.log as below.   WARN : cannot parse into key-value pair.     ... View more

We would like to know how to onboard an AIX wtmp logs to splunk ?Can it be done via Universal Forwarder ? If so can you please help us with the documentations for onboarding AIX logs ?     ... View more