Update: since Splunk 9.2 Regex_cpu_profiling  in limits.conf default value is true. regex_cpu_profiling = <boolean> * Enable CPU time metrics for RegexProcessor. Output will be in the metrics.log file. Entries in metrics.log will appear per_host_regex_cpu, per_source_regex_cpu, per_sourcetype_regex_cpu, per_index_regex_cpu. * Default: true     ... View more

In case this is still a topic: https://www.patrick-bareiss.com/sigma2splunkalert-tutorial/ ... View more

New Info (Splunk Dashboard Beta 0.9) Use inputs and tokens: https://docs.splunk.com/Documentation/DashApp/0.9.0/DashApp/inputs Compare classic dashboard to new one (scroll down to the bottom): https://docs.splunk.com/Documentation/DashApp/0.9.0/DashApp/IntroFrame ... View more

Hi, I have the same issue with Splunk 7.0.1 and Scatterplot 1.4.0 Build 8 Regards Arminb ... View more