Hello, Is there any way to add a Custom Logo in place of the Splunk Logo in an exported PDF? I am on Splunk Cloud not Enterprise so Im not sure if I can access a static folder to use with server settings > email settings > PDF report settings. Alternatively Ive tried just adding an image to the dashboard but even after having it appear (using embedded base64), the image does not appear when exported to PDF. Any guidance or alternatives would be appreciated. ... View more

I am trying to create a props.conf to pass a custom timestamp. To do so I wanted to upload data and use the set source type page to configure timestamp parameters and then copy the props.conf to clipboard. However, the preview on this page does not update when I click "Apply Settings". The preview only changes when I select a new source type from the dropdown next to "Save As", changing anything in "Event Breaks", "Timestamp", or "Advanced" does nothing. Some thing to note is there is a red exclamation point in the top left saying "Can only preview uploaded files", unsure what this means. When I do save the data and search it, it DOES look like the source type changes I made took effect, but this really isn't a feasible way to test and configure my parameters. Any way to get this visible in "Add Data"s preview? ... View more

Hello, I have tried numerous configurations to get my Splunk Universal Forwarder to connect to my Splunk Enterprise instance with no luck. I am trying to forward data to my indexer located on port 3389 with the only info in the logs reading WARN AutoLoadBalancedConnectionStrategy [136236 TcpOutEloop] - Cooked connection to ip=XX.XX.XX.XX:3389 timed out I have checked telnet with that port in both directions and the connection is successful. Any advice would be appreciated ... View more