So I've been working on a particularly complicated and convoluted set of log files that require a bit of regex work to be done. weve gotten the field extraction page to grab the right fields, and even test the rex on the data set, first head 10000 and then no head at all, and it works fine. however once we save the extractions we get nothing, no fields ever show up, ever if we tell it to show fields with no related records. any idea what we are missing here?
Edit:__
all extractions are in the search app, but are given global permissions.
We have restarted or Splunk server several times, a few of the extractions from our transforms file show up but that's it.
As for our formatting the field extractor builds them and we will click the test button and it works just fine in the testing window, but it's exactly when we save it that it just disappears.
We just updated to Splunk ver6 are we missing some configurations?
