All Apps and Add-ons

After updating Splunk and the Splunk Add-on for Juniper, why is the src field no longer listed for Juniper logs?


After updating to Splunk 7.2 and updating the Splunk Add-on for Juniper a few weeks ago, I noticed that the 'src' field is no longer listed even though it's still a field extraction and checking to see if perhaps it wasn't a field that was selected, but even in that screen the only field showing is src_port.

When I click 'Extract new fields' the value for the event selected shows src being an existing extracted field and when I open that field extraction, it does have the K/V info for src extracted.

Any ideas?

Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...