Archive

Alt key to add NOT no longer works on fields in V6

Communicator

We've just upgraded to V6, and one of the first things I've noticed is that you can't use the Alt-Click to add the NOT search term on fields.

It still works when you select text within an event, but not on a field (such as sourcetype or source). I'm a heavy user of this function when I'm troubleshooting issues, does anybody know if there's a new way to do this?

Thanks,

Ash

Tags (2)

Explorer

Just found this similar post, apparently it's a known bug in Splunkv6:

http://answers.splunk.com/answers/109473/alt-click-not-working-selected-fields