I was querying the data in fast mode, and the fields did not show. FIX: Changed to verbose mode and chose list format for the display. I then discovered they were actually there the whole time. ... View more

Then what do you set it up to do if you do NOT set it to alert every time? As far as I can tell (in version 5), there is no setting to tell Splunk this is not an alert. The alert condition and mode is automatically set for any scheduled search. ... View more

We are working towards adding more documentation and examples to the SDK. In the meantime, given that there is no back slash in the path for .splunkrc, I suggest that you check the values for HOMEDRIVE and HOMEPATH env variables. ... View more

It's more that the GoogleMaps module doesn't react well to having its DOM elements arbitrarily shown and hidden. I have seen similar problems reported using GoogleMaps module in Sideview XML views fwiw. Some of the problem, possibly all, may be fixable by hacking the Switcher modules to broadcast some google-specific event that the GoogleMaps module listens for, along the lines of a resize event, or at any rate some event at the receipt of which it will re-render/resize itself. However I'm afraid I don't know of anyone that has attempted such a fix. ... View more

Thanks for your response. It appears that the FlashTimechart module only populates for searches that aren't using stored results (meaning the search should run when the page loads). I ended up just creating a saved search that timecharts count(events) on a per_hour() basis. All is right as rain. ... View more