I'm trying to use the field extractor app, but when I click on the Extract Fields workflow, it gives me an error: Stacktrace: Traceback (most recent call last): File "
For some reason, it doesn't find my index. I'm running a distributed environment, and this is on a search-head. Does it needs to be installed and run on an indexer? I love the idea of this app, but I've never been able to get it working properly.
I fixed the problem. Update the app to 2.3.
I just updated the Field Extractor app to work in distributed environments, so it works with indexes not on the search head.
http://apps.splunk.com/app/494/
Let me know if you see any problems.
I fixed the problem. Update the app to 2.3.
I just updated the Field Extractor app to work in distributed environments, so it works with indexes not on the search head.
http://apps.splunk.com/app/494/
Let me know if you see any problems.
Similar problem encountered ... within my instance, the error is:
Stacktrace: Traceback (most recent call last): File "
Splunk support is declining to assist, as this is not an "official" app. If anyone is willing to collaborate on figuring this out, let me know...