I think you missed the point of our gripe. Our gripe is that having a real-time dashboard on a kiosk where you don't want to have to log back into Splunk every few hours (because it's a kiosk and shouldn't have to have human input to it) without having to up the default time-out for users to something unrealistically high for everything, is not possible with Splunk as it stands.
... View more
I look forward to updating my forwarders from 6.0 to see if this alleviates our problem. This has been plaguing my production instance of splunk for months.
... View more