All Apps and Add-ons

Why would field extractions only work for one user?

stevennoble
Explorer

I'm on a cluster and I've added a field extraction via the setting ui. The extraction ended up in apps/search/local/props.conf under [splunkd]. The extraction works fine for me but when other users use splunk they don't see the extracted fields.

0 Karma
1 Solution

stevennoble
Explorer

Turns out I was setting a props.conf in users

View solution in original post

0 Karma

stevennoble
Explorer

Turns out I was setting a props.conf in users

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...