The registration of the DLL worked for us. ... View more

Martin, Thanks I am looking into this now. Gizmo ... View more

Martin, As I am a newbie when it comes to this I am willing to try anything to learn more about it. Do you have a recommended link that I can read on how to set data modeling up? Gizmo ... View more

Giuseppe, If I run the string prior to the tscollect I am seeing the events and Statistics. However, if I try to run | tstats I receive the following "Error in 'tstats' command: this command must be the first command of a search. ... View more

Giuseppe, So I am trying your solution and if I understand properly when I create the search and run it a new TSIDX is created and allows the follow-up search using | tstats . The following is what I have set Saved Search to be ran once a day index=xd sourcetype="xendesktop:7:session" | dedup UserName date_mday | table _time UserName | tscollect namespace=DailyUserUsage This shows me 86 for the count and then if I run the following | tstats count AS cnt FROM DailyUserUsage GROUPBY UserName | timechart span=1d sum(cnt) by UserName I get nothing returned. Any idea why? Gizmo ... View more

Martin, This does speed it up a little bit and is more condensed than what I have so thank you for this. Scott ... View more

Stephen, I realize this is about seven years late but I wanted to thank you for this tidbit of information. Our reports just became more readable with not having to explain what "OTHER" is. Gizmo ... View more

I would like to know why this happens. Granted this command did release the lock on the file and I was successful at starting the service but why is this randomly happening so that I no longer need to use the band-aid. ... View more