I am looking for the proper sourcetype to ingest JBOSS console.log. Below is the path to the log file: /opt/app/jboss/standalone/log/console.log   The TA does not define the sourcetype for this log file. Any help would be appreciated.    ... View more

We have a license for only DNS and Netflow data sources. Is their a way to edit the license to allow additional sourcetypes to be utilized with this license? Currently,  the following sourcetypes are only allowed to be used with the license:   <sourcetype>*dns*</sourcetype>  <sourcetype>flowintegrator</sourcetype>       <sourcetype>*netflow*</sourcetype>   Any help would be appreciated.  ... View more

I have Proofpoint TAP Modular Input ( https://splunkbase.splunk.com/app/3681/) set up in a distributed environment. Due to the expiration of the key, we saw a halt in log ingestion into Splunk. Now we have re-inserted the key and log ingestion has resumed. However, we are missing 2-3 days worth of events due to the key issue. Is there a way to define in the TA to ingest logs from a specific start/stop date? ... View more

I am currently running a dashboard with a datamodel. The dashboard is run against bulk IOCs from a lookup. How can I put up a panel in a dashboard that will display the list of IOCs and count of IOCs in results? ... View more