@scelikok - Thanks again! The File Config Quest dashboard seems to have the se searches closest to what is needed. Still trying to figure out if it is possible to wildcard part of a rest search For example: | rest splunk_server=local /services/-/-/admin/file-explorer/%2Fopt%2Fsplunk%2Fetc%2Fapps%2F<app_name>%2Flocal is there a way to wildcard the app_name <-- when specifying a specific app name the above search works
... View more