Why is the "field action menu" missing and how do I enable it?

[mskjoldebrand]

I've been watching the new user tutorials and reached "Tags". However in my installation, I fail to find the "field action menu" which appears to the right of e.g. "host=www2" in this video here: https://www.youtube.com/watch?v=MCyOg66dbIk&index=12&list=PL59B00A6F603366EA

How do I provoke Splunk to show it?

[mcederhage_splu]

An answer that is loosely coupled.

One reason can be that the search you are executing is a realtime search. So change the time that you are using from realtime to something static

[richgalloway · Accepted solution]

As you might expect, Splunk has changed a bit in the last four years. The "field action menu" is no longer there. Instead, click on the '>' in the 'i' column to expand the event. Then click in the Actions column for the field you wish to tag and select 'Edit tags'.

[mskjoldebrand]

Ah that is true. Thanks.

[richgalloway]

Which version of Splunk are you using?

[mskjoldebrand]

It is 6.5.1