Hello everybody!   I am researching to integrate splunk with my service running in Docker. In my case, the splunk enterprise runs on a different host. One way to achieve this is to use docker's built-in splunk logging driver. I see that one of the configuration parameter is "splunk-token": "" which is the splunk Http Event Collector token that needs to be created in the Splunk enterprise. My question is - Would I be required to create separate HEC tokens for each of the microservice projects. Let's say, if we have 10 microservices projects running which need to integrate with Splunk. Does that mean I would have to create 10 different tokens in Splunk enterprise? ... View more

I have a dashboard with different panels, I would like to convert to a savedsearch. This accomplishes two things: Better performance, search can run every 5 minutes, panel refresh at 1 minute. Everyone looks at the same data, it sometimes happens that one person sees red while it is green again. How can i do that?   ... View more