Hi @virggray, For PowerShell, this should probably be: $env:SPLUNK_HOME="C:\Program Files\Splunk" However this doesn't really achieve much (it just sets the environmental variable SPLUNK_HOME ). It's unclear to me what exactly you're trying to do...are you able to clarify? If you just want to be able to run the splunk CLI command from a PowerShell prompt, you need to do something like: $env:PATH += ";" + "C:\Program Files\Splunk\bin" Cheers, - Jo. ... View more

Your Infoblox, ASA, and Palo Alto data should have different sourcetypes. Add NOT sourcetype=infoblox to your query to filter out Infoblox events. ... View more