Thank you for this information!! I greatly appreciate it, Ken ... View more

Thank you for the reply and example! Greatly appreciated. Ken ... View more

Thank you very much for your comment and share of source code! It has helped me out. I am not very well versed in xml, html, web design etc but this is bringing back some memories and I'm starting to get more accustomed to it again.  Ken ... View more

I am also interested to know if this will work on an Splunk Enterprise Indexer. I am currently working in deploying Splunk Enterprise Hyper-V VMs and have run into an issue with the Monitoring Console. When attempting to look at "Instance" specific resource usage all of the data fields are empty. It appears the instance is still showing from the original installation. I have updated the OS Host name and the Splunk server name through the gui and also manually checked/updated in the server.conf and one or two other .conf files (I can't remember off hand). I will try running this script tomorrow when back in the office and see if it updates the "instance" on the Monitoring Console. I'll update my finding tomorrow. Anyone with any insight on this please chime in!! Thanks, Ken ... View more

I am curious to know also! I have moved my SPLUNK_DB to a separate drive but the .dat files are still being created/updated to the default location. ... View more

Can the latest version of the Universal Forwarder send to older version of Splunk Indexer? Specifically v5.6?? I would not think there would be a problem but need to verify. Thank you, ... View more