I believe I've found the problem, at least in my case. The problem is that our Apache log isn't recording the referrer or user-agent in the log file. The searchers used by the app seem to require this information, including the backfill ones which execute a bunch of saved searches.
I was able to get around the user-agent one by creating a new Event Type in Manager -> Event types called ua-browser-none with a search of of "*" (just the star). This causes the searches to accept anything in that field (or nothing). While I haven't tried it yet, I'm guessing the referrer might be solvable in a similar way if it is blocking other searches from being performed.
Could someone from Splunk provide the log format for Apache that this app is expecting (such as how the LogFormat command would appear in the appropriate Apache .conf file)?
... View more