Hello tshah-splunk, Increasing the max_upload_size in web.conf worked in my case. Gave you a Karma point. Thanks  😎 ... View more

Hello Giuseppe, Noticed it's been over 8 years since you posted your question, but came across this post will searching on how to make a text box empty by default.,,,,same as you were looking to do. Was working on a dashboard today, and thought what character is not ever in event data, and is not a character used by SPL for any reason.  The answer was the:  ~ This worked for me, like a charm, in a dashboard text box:    <initialValue>~</initialValue> <default>~</default> Best regards,   😎 Dennis ... View more

Hello, This is definitely an old post, but can anyone share how they have created a search to accurately list whether a saved search is either a report or an alert. This list exists under the menu item Searches, Reports & Alerts as the column Type lists whether it's a report or an alert, but the code underneath doesn't seem to be viewable like selecting a panel in a dashboard will show the underlying SPL. Also that report from Searches, Reports & Alerts which shows the Type doesn't seem to be exportable. ... View more

We're not running any search jobs. That high CPU usage is just from Splunk executing. You gave me an idea, will remove all the apps except 1 since this is a new installation, and see if the performance improves. ... View more

That appears to be the case that Splunk is occupying the cores. Nmon shows the 2 CPU's as 4 cores, and splunkd and python are using the majority of all 4 cores. ... View more

It's a dedicated JS12 blade in an IBM 7998-60X Blade Center H running AIX 6.1. 2 PowerPC_Power6 CPU's running at 3.826 GHz. 10 GB's of the 20 GB's of memory is available. Using nmon splunkd processes are the heaviest CPU users at over 100% all the time, and I'm not doing anything with SPLUNK. That high CPU usage is just from the SPLUNK executing. ... View more