All Apps and Add-ons

Using Extracted Fields from Search app in Smart Edit

NadavN
New Member

I really like "Smart Edit", it is very useful tool that can make life much easier...
my question is:
is there a way to refer "extracted fields" that were created in the context of the search app when writing a query using "smart edit"?
Thanks

Tags (1)
0 Karma

NadavN
New Member

Found it....
It’s a simple issue of permissions. Need to change the permissions of the field extraction object from private to global (all apps).

Manager » Fields » Field extractions --> specific field extraction "Permissions" --> Objects should appear in "All apps"

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...