All Apps and Add-ons

field extractor app errors

a212830
Champion

I'm trying to use the field extractor app, but when I click on the Extract Fields workflow, it gives me an error: Stacktrace: Traceback (most recent call last): File "", line 397, in initInfoFromWorkflow File "", line 494, in setCurrentIndex ModelException: Ignoring unknown index 'network'

For some reason, it doesn't find my index. I'm running a distributed environment, and this is on a search-head. Does it needs to be installed and run on an indexer? I love the idea of this app, but I've never been able to get it working properly.

Tags (1)
0 Karma
1 Solution

carasso
Splunk Employee
Splunk Employee

I fixed the problem. Update the app to 2.3.

I just updated the Field Extractor app to work in distributed environments, so it works with indexes not on the search head.

 http://apps.splunk.com/app/494/

Let me know if you see any problems.

View solution in original post

0 Karma

carasso
Splunk Employee
Splunk Employee

I fixed the problem. Update the app to 2.3.

I just updated the Field Extractor app to work in distributed environments, so it works with indexes not on the search head.

 http://apps.splunk.com/app/494/

Let me know if you see any problems.

0 Karma

jonathan_kaplan
New Member

Similar problem encountered ... within my instance, the error is:

Stacktrace: Traceback (most recent call last): File "", line 397, in initInfoFromWorkflow File "", line 494, in setCurrentIndex ModelException: Ignoring unknown index 'main'

Splunk support is declining to assist, as this is not an "official" app. If anyone is willing to collaborate on figuring this out, let me know...

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Introducing the 2026 - 2027 SplunkTrust cohort!

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...