Would you know why does the Selected fields are missing after i enable this specific Calculated fields ?
And when i delete that calculated field the the default selected fields are showing (host, source, sourcetype).
The fields are searchable but not showing on the Selected or interesting fields
I only have these on my app:
-default.meta- default access = read : [ * ], write : [ admin ]
-app.conf - just the name of the app and the state = enabled.
After hours of testing and searching i found this:
That resolve my issue.
View solution in original post