_internal index returned no results, I tried to set an index via the GUI and got the following error: "Timed out while waiting for splunkd daemon to respond. Splunkd may be hung." So I went into the server and configured /etc/apps/websense/local/indexes.conf with the following:
homePath = $SPLUNK_DB\websense\db
maxDataSize = auto_high_volume
thawedPath = $SPLUNK_DB\websense\thaweddb
coldPath = $SPLUNK_DB\websense\colddb
Does that look correct? For some reason the backslashes are getting removed when I click comment, but they are in the config.
... View more