Hi Guys,
Would you know why does the Selected fields are missing after i enable this specific Calculated fields ?
And when i delete that calculated field the the default selected fields are showing (host, source, sourcetype).
The fields are searchable but not showing on the Selected or interesting fields
Enabled :
I only have these on my app:
-default.meta- default access = read : [ * ], write : [ admin ]
-app.conf - just the name of the app and the state = enabled.
-props.conf
After hours of testing and searching i found this:
https://community.splunk.com/t5/All-Apps-and-Add-ons/Weird-behavior-of-addon/td-p/386682
That resolve my issue.
After hours of testing and searching i found this:
https://community.splunk.com/t5/All-Apps-and-Add-ons/Weird-behavior-of-addon/td-p/386682
That resolve my issue.