The Splunk for WebSphere Application Server app does support multiple profiles/servers on each physical server. We have updated the documentation to be a little more helpful for setting up a distributed environment. The app does not currently support getting PMI data from other machines via the WebSphere Deployment Manager. I believe that even if metrics are gathered through the deployment manager, a local process has to be run on each physical machine. ... View more

Mike, the current release on Splunkbase now supports multiple profiles/servers on a single physical box. We have also updated the documentation to be a little more helpful for setting up forwarding and receiving in a distributed environment. ... View more

Im not 100% sure what you're ultimately doing with this dropdown either. But it looks like you're using the <input type="time"/> to let the user set the timerange (which includes various real-time timeranges), and then you're giving them a dropdown to manually control the timespan of a timechart command below somewhere. Assuming that's correct, the span argument to timechart has no effect on the realtime vs historical nature of the search. That determination is already made when the timerange was picked in the <input type="time"/> element... One note: is that the values and the order and the grouping of the entries in the time pulldown can actually all be changed and customized for a given app by setting different stanzas in times.conf. This may be overkill for you but it might be worth knowing. ... View more

Take a look at Use XML Schemas in the docs. This is probably the link you want though. Replace localhost:8000 with your SplunkWeb host/port. http://localhost:8000/en-US/info There's also some information here that may be relevent. ... View more

There is also a new Splunk Python SDK on GitHub. You can access it here: https://github.com/splunk/splunk-sdk-python Any questions - psanford@splunk.com or ping us on Twitter: @splunkdev ... View more