All Apps and Add-ons

Universal Field Extractor: Why is the app not displaying all sources?

timm747747
Path Finder

When I select the "source" dropdown in the Universal Field Extractor app, it doesn't display all of the sources associated with the index I've restricted the extraction to. I tried to look at the code, but it's Python and 1280 lines worth of code that I didn't feel comfortable messing with. I assume the search may only be going back 5 minutes or 15 minutes or something and not doing a complete search of all available results, just to finish quickly.

Any ideas?

Thanks!

0 Karma

woodcock
Esteemed Legend
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...