Hi All I'm trying to use the "Platform Advisor for BMC Remedy" splunk Add-ons for BMC Remedy in Splunk Enterprise. below are the steps followed but not able to see the anything in dashboard step 1: Downloaded Platform Advisor for BMC Remedy splunk add-ons step 2: Placed the files under %SPLUNK_HOME%\etc\apps<> step 3: able to see the bmc app in the url step 4: changed input.cong in below folder locations as shown below D:\Program Files\Splunk\etc\apps\platform_advisor_remedy\appserver\addons\rpa-inputs-ta\default D:\Program Files\Splunk\etc\apps\platform_advisor_remedy\default input.conf [monitor://D:\Program Files\BMC Software\ARSystem\Arserver\Db\arerror.log] disabled = false sourcetype = remedy_arerror [monitor://D:\Program Files\BMC Software\ARSystem\Arserver\Db\armonitor.log] disabled = false sourcetype = remedy_armonitor Note: have installed splunk enterprise on the same server where BMC Remedy AR is installed questions: 1) let me know if any steps i have missed out so that i can view the data 2) what about mid-tier configuration , have mid-tier on different server , how should i proceed for it [monitor:///opt/remedy_data/mid-tier/] disabled = true sourcetype = remedy_midtier Please help me out in resolving the issue ... View more

Hi All New to spluk and have a basic question want know how to get all fields (selected and interesting fields) related to each source type by search command ex: we have 4 sourcetype and need to find all list of fields(selected and interesting fields) related to each sourcetype ... View more