Hi!  Found same bug and errors upgrading to 9.4.8 (splunk-9.4.8-c543277b24fa-linux-amd64.tgz) on Customer's Environment. Asked to appli the same fix and let's see if it works there too!   Thanks, Marco   ... View more

Hi Lawrence, can you please share your solution? A customer just asked us to collect audit logs from Marketing Cloud and we're trying to figure how to do it. Thanks a lot!   Marco ... View more

Hi Joshiro, how did you solve the issue? I'm facing the same problem to connect to Spacebridge to configure Splunk Edge Hub.   Marco ... View more

Same error in Palo Alto Application, V. 7.1.0. ... View more

Same bug on 8.0.8. The workaround proposed worked!!! ... View more

Hi All! Any update on this issue? I'm having the same problem with Splunk ITSI 4.9.2 on Cloud. Just opened a case with the Support. Regards, Marco Scala ... View more

hI! Any news about this problem? I've the same issue with a Customer with mySQL and DBX 3.4.2.   Regards, Marco ... View more

hi! I had the same issue but with the latest version 1.4.9 now it works!   Regards, Marco ... View more

Same issue here with Splunk 8.0.3 ... View more

I downvoted this post because not pertinent: if you have a scheduled alert it should fire more actions according to the number or results. ... View more

I downvoted this post because not pertinent: if you have a scheduled alert it should fire more actions according to the number or results. ... View more

On my "new" OSX 10.14.4 Cmd+\ doesn't work anymore. Ideas?!? Marco ... View more

I downvoted this post because not pertinent with the issue ... View more

adding "|table hostname" prevent the browser to hang because there are maybe too many columns. Thanks! ... View more

Exactly! I confirm that works also for me! ... View more

I correct! It works actually using info_min_time and info_max_time instead of $timeToken.earliest$ or >$timeToken.latest$ Thanks a lot!!! Marco ... View more

It works but not from a dashboard, using a shared timerange picker. Thanks for the idea anyway! ... View more

Perfect!!! it helped me a lot and it works, also with unset too! <condition label="Esercizio"> <set token="vistaESE">Esercizio</set> <unset token="vistaINTR1"></unset> <unset token="vistaINTR2"></unset> <unset token="vistaSYSR2"></unset> <unset token="vistaPREP"></unset> </condition> <condition label="INTR1"> <unset token="vistaESE"></unset> <set token="vistaINTR1">INTR1</set> <unset token="vistaINTR2"></unset> <unset token="vistaSYSR2"></unset> <unset token="vistaPREP"></unset> </condition> and so on... to drive several hidden panels in my dashboard! Marco ... View more

Samere here. We had the same issue and using a previous release we had no problem. ... View more

You have to modify the source: <form hideFilters="true"> ... This will work even with a default dashboard where you cannot modify the query string. Marco ... View more

This is still available: https://splunkbase.splunk.com/app/3339 Marco ... View more

Hi,Thanks! I saw it and changed status descriptions. But I need a way to define status transitions based on roles. Marco ... View more