Hi, Why do you filter the result of transaction command with duration=0? I think that causes Splunk to return sessions that immediately end after they start. Maybe "concurrency" command can be used for your purpose. http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Concurrency ... View more

Hi, Did you execute 'ldconfig' after you added .conf to /etc/ld.so.conf.d/ ? Make sure you installed 64bit version of Oracle client libraries. Make sure LD_LIBRARY_PATH is exported in the shell script you run as scripted input. ... View more