@harsmarvania57  I found your solution more relevant to my case. I need to renew the RSA password; is it possible to change RSA password during server.pem renewal? ... View more

So as an update, I have hundreds of useless field extractions now that seem to be coming from the URL and trailing pages (which have = contained in them). Also I lost a valuable field "src", after I disabled the app and ta on the search head the src field returned... and of course Splunk support won'ts help with a "Palo" app and Palo has not replied to my request for support... grrrrrrrrreat! ... View more