All Apps and Add-ons

Why would field extractions only work for one user?

stevennoble
Explorer

I'm on a cluster and I've added a field extraction via the setting ui. The extraction ended up in apps/search/local/props.conf under [splunkd]. The extraction works fine for me but when other users use splunk they don't see the extracted fields.

0 Karma
1 Solution

stevennoble
Explorer

Turns out I was setting a props.conf in users

View solution in original post

0 Karma

stevennoble
Explorer

Turns out I was setting a props.conf in users

0 Karma
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...