Figured it out for anyone else out there: Here is the path that worked for me in Yosemite. /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java Thanks Chris ... View more

One thing that may be complicating your debugging (it did for me) is that the 'rising column' value is stored in $SPLUNK_DB/persistentstorage/dbx/ /state.xml. That state.xml file is not reset when you clean the index, or even if you delete and recreate the index. If you don't manually go in and toss that file, dbx will refuse to index anything that has a rising column value lower than the number given in the state.xml. ... View more