Hi All,   We are using Splunk add for VMware to monitor Vcenter device. This is installed on virtual appliance. There was no  issue until reboot of the appliance. But after the reboot  yesterday, we are not receiving data on VMware indexes(VMware-inv, VMware-task event and VMware-perf). We could see all the Vcenter devices are connected in Splunk add on for Vcenter. But still we are not receiving any data. I could see the ports the required ports are opened. In the _internal logs I could see the below error: RROR Application Updater - Error checking for update, URL=https://apps.splunk.com/api/apps:resolve/checkforupgrade: Connect Timeout   Could any one please  provide any inputs to know why there is not data collected. Is the above error related to VMware app.   regards Manjunath R ... View more

We have episodes creating service now tickets through a 3rd party interface. The episode status is changing when the status is changed in service now. But when the episode status is closed in splunk, new episode is not created. Instead events are updated in the same closed episode. Can any one let me know what could be the issue. regards Manjunath R ... View more

|eval SNOW_Description=case(EMGC_ADMINSERVER_Status!="k1","Java Process EMGC_ADMINSERVER data not available in splunk on host, EMGC_ORACLE_Status!="k2","Java Process EMGC_ORACLE data not available in splunk on host)   Here I am trying to use multiple fields inside case statement. I am not getting correct output. How can this be achieved? ... View more

How do we get Linux patching details in Splunk ... View more