Copying the following apps from the addons to the apps subdirectory solved all my issues
* SplunkAppForCiscoUCS
* Splunk_KB_CiscoUCS
* Splunk_KB_CiscoUCS
The configured as per readme and restarted splunk
Should read the README more carefully!
... View more
I should have more accurately stated, this does solve the problem when searching, if I take * as the default, but the problem still remains on launching the form.
... View more
I have just upgraded to Splunk 6.0. When I do a form search it has completely different behaviour in comparison to Splunk 5.
In Splunk 5 blank fields were like behaving as if there was * in the search query and all results were returned. Now if I do the same thing in Splunk 6.0 I get this error:
Search query is not fully resolved.
Even when I just launch the view I get the same error.
... View more