Licensing issue maybe? ... View more

Correct link: http://wiki.splunk.com/Community:ConfigureNoInternet ... View more

From the documentation: interval = [<number>|<cron schedule>] * How often to run the specified command (in seconds), or a valid cron schedule. * NOTE: when you specify a cron schedule, the input does not run the script on start-up. * If you specify the interval as a number, it may have a fractional component; e.g., 3.14 * The cron implementation for data inputs does not currently support names of months or days. * Defaults to 60.0 seconds. * The special value 0 forces this scripted input to be run continuously; that is, as soon as the script exits, the input restarts it. * The special value -1 causes the scripted input to run once on start-up. There is no minimum it seems. Maybe your script is not quick enough? Or maybe look at setting it to 0; then it starts again after the command exits. ... View more

From the splexicon: The repository for data in Splunk Enterprise. When Splunk Enterprise indexes raw event data, it transforms the data into searchable events. Indexes reside in flat files on the Splunk Enterprise instance known as the indexer. There are "no rules" for it. You just put data in. Schema is built on the fly, so don't worry about that at the indexing stage. You can use your separate index for access control separation for example 🙂 ... View more

Thanks for your reply. That is unfortunate. I will wait for a shot time if someone else has some answer, and accept next week if there is no other way. Thanks. ... View more

What do you mean by "changes in content management"? ... View more