As I said before - if it worked, good for you. And I'm not gonna go through your logs. For several reasons. Don't take it personally but this is a public forum where people give time whenever they want, the way they want. Answers is not a free support/consulting service. If you want something specific done - reach out to your local Splunk Partner or hire Professional Services. To put it bluntly - it costs money. Secondly, you've already done the migration and apparently you're running the new system as prod. My looking into your logs won't change anything. Thirdly, I might miss something, especially considering the first point. You asked, you have been advised, you did otherwise. I won't pat you now on the back and say "it's ok". It might. But don't have to. And I don't have spare time just to ease your mind, to be frank. I hope it is ok. But I won't check it.
... View more