I did a fresh install of Splunk 6 and then installed Real-Time Output. I find that the Output Assistant doesn't save modifications made to searches, and any kind of manual setup of RTO searches don't appear to send events out via a port nor to a file. Are there any modifications that need to be made as a workaround and/or are there plans to release a version of RTO that will work with Splunk 6?
Even i am facing the same issue. Kindly update if any changes are required