Knowledge Management

Selected Fields are missing

jadengoho
Builder

Hi Guys, 

Would you know why does the Selected fields are missing after i enable this specific Calculated fields ?

And when i delete that calculated field the the default selected fields are showing (host, source, sourcetype). 

The fields are searchable but not showing on the Selected or interesting fields 

 

Enabled : 

jadengoho_0-1595559960989.png

 

I only have these on my app:

-default.meta- default access = read : [ * ], write : [ admin ]

-app.conf - just the name of the app and the state = enabled.

-props.conf

jadengoho_1-1595560138674.png

 

Labels (1)
0 Karma
1 Solution

jadengoho
Builder

jadengoho
Builder

After hours of testing and searching i found this: 

https://community.splunk.com/t5/All-Apps-and-Add-ons/Weird-behavior-of-addon/td-p/386682

That resolve my issue.

Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...