I am trying to index the httperr files from IIS, located in C:\windows\system32\LogFiles\HTTPERR but each of those files start with a set of lines that begin with a #. How can I instruct splunk to ignore lines starting with #? ... View more

I have taken iplocation.py as a skeleton for a simple custom search command that adds another column to the search results. I am finding that when I have an error in my code, the exception handler at the bottom isn't executing properly and I have no way of seeing what the problem was. The search simply finishes with no results instead of whatever generateErrorResults would have returned. How can I enable more debugging or see the actual python exception generated? I've looked under System Logging but I couldn't find anything that would seem to do it. ... View more

Column order (in HTML table output format) in email alerts seems to be decided by splunk, ignoring the order in the "fields" command. Is it possible to specify which order they are in? ... View more