Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Fields that were once extracted aren't being extracted anymore... why?

$
0
0
Hey there, I made an app. It worked good and extracted data exactly the way I wanted it to. I am now trying to duplicate the app, using the same custom field extractions, but some key fields aren't being extracted, despite using the exact same regex as before! The permissions are global for all objects in the app. Anybody have any ideas why my fields won't get extracted? Thanks

Viewing all articles
Browse latest Browse all 47296

Trending Articles