@colbym , thank you for this workaround.  Using the original search also worked for me.  I recently upgraded to version 14.5.1 but it did not resolve the issue.  Hopefully, Splunk will resolve soon.  ... View more

Noticed the same issue here.  There seems to be a discrepancy with how ITSI/IT Work does entity discovery.  Entity types appear to rely on metric data and entity discovery modules on event data. ... View more

Also I plan create indexer cluster environment from distributed environment (existing: one indexer, one searchhead) To create indexer cluster environment will we need minimum one master cluster and 3 peer nodes? ... View more