After upgrading, when accessing field extraction page in manager in 4.1, it doesn't work.
This appears in splunkd.log
ERROR AdminManager - Admin handler 'extractions' not found'
What is this about?
This is SPL-31174, there is a small flaw in the migration from 4.0 to 4.1.
For 4.1, the 'field extractions' manager UI page was modified into a sub-page of the 'fields' manager page. However, the old page is accidentally left in place.
To succesfully create and manage fields, you can simply click on the Fields link instead of Field Extractions.
To remove the bogus UI element, you can remove or rename the page element splunk/etc/apps/search/default/data/ui/manager/data_extractions.xml
Note, this problem should not occur in Splunk 4.1.5 and later.
View solution in original post