topic Re: Filters does not allow editing of values? in All Apps and Add-ons

Filters does not allow editing of values?

gesman — Sun, 14 Dec 2014 17:01:06 GMT

Trying to add filter to stream, so that 'http_method' would match "POST".
While editing stream - added filter:
"http.method", "exactly matches" - but "Value" field is disabled and clicking on small pencil icon doesn't do anything.
Tried doing the same with another browser - same result - cannot add/edit values for filters - value field always disabled.

How can i add/edit filters for streams?

Re: Filters does not allow editing of values?

gesman — Mon, 15 Dec 2014 16:53:23 GMT

I found that on different deployment - this feature works. I used RPM-based install on the working one.
On non-working I used TAR-based install.

So maybe it's something to do with permissions. To overcome that I manually edited .conf file where filters are actually reside and restarted splunk to activate that.

Gleb

Re: Filters does not allow editing of values?

mdickey_splunk — Mon, 15 Dec 2014 18:12:20 GMT

This seems to work for certain browsers/versions but not others. It is a known bug that we believe is fixed in the soon-to-be-released 6.1.1 maintenance release.

Re: Filters does not allow editing of values?

gesman — Tue, 16 Dec 2014 02:52:39 GMT

Actually that may be the cause - as second (working) setup uses older browsers (QA server within financial company - older browsers are a norm here) vs. non-working setup is my home-based.

Looking forward to update.

Re: Filters does not allow editing of values?

mdickey_splunk — Wed, 11 Feb 2015 19:16:14 GMT

I believe this is fixed now in 6.1.1. Please see http://docs.splunk.com/Documentation/StreamApp/latest/ReleaseNotes/FixedProblems (STREAM-1527 may apply to other browsers/versions as well).