I had a similar problem when I was trying to use the Alexa data. It seems like Alexa has started limiting downloads of their data unless you pay for it now. Not sure if Splunk has something special with them, but this worked for me: http://www.georgestarcher.com/splunk-app-for-es-and-alexa-top-sites/ The Cisco top 1m still populates the exact same lookups that the Alexa data used to, so it's a pretty seamless transition.,I ran into a problem when trying to use the Alexa data too. I found this article that talks about how Alexa doesn't allow their data to be downloaded without paying anymore. Switching over to the Cisco top 1m worked for me, and it still uses all the same lookup names and populates all the same places as the Alexa data used to. http://www.georgestarcher.com/splunk-app-for-es-and-alexa-top-sites/ Hope that helps!
... View more