Adding HEC input does not have option for app selection

[termcap]

Hi,

While adding an HEC input on the Splunk heavy forwarder, Splunk does not provide the option to select the app. I am using Splunk version 8.1.3 and build 63079c59e632

Is this a bug in the web interface in version 8.1.3 or has the option been removed do to some reason.

HEC input addition screenshot:

Thanks,

Termcap

[venkatasri]

Hi @termcap 

I have tested it, 'App context' available to choose on my 8.1.3 single instance Splunk and HF both.

could be a bug in your version and find for errors in installation, try configure it from backend inside one of app.

[richgalloway · Accepted solution]

I didn't find anything in the Release Notes about this so I presume it's a bug.  Open a support request.

[termcap]

Hi @richgalloway 

I do not have payed support with Splunk, So I just hope someone from Splunk is able to take it further from this thread. (Or is it possible to raise a bug request or something similar ? )

Thanks,

Termcap.