During my research into dealing with the header of a .csv, I've found that CHECK_FOR_HEADER is a deprecated feature and is no longer a best practice for dealing with the header of a .csv file. http://docs.splunk.com/Documentation/Splunk/5.0.4/releasenotes/Deprecatedfeatures ... View more

The "range" command should give you the difference between the earliest and latest times. sourcetype=juniper | stats min(time), max(time), range(time) BY user,date_wday ... View more

Oddly enough, the issue went away on its own a few hours after it started to appear. Is it possible that this error occurs when a scheduled search is running and one tries to edit it? ... View more

Running 5.0.2 here and getting the same error "An error occurred while rendering the page template" when I click on either the saved search itself or try to Clone it. Any suggestions? ... View more