Splunk Search

After upgrade to splunk 4.1, I try to access the field extractions page in manager, and it doesn't work.

jrodman
Splunk Employee
Splunk Employee

After upgrading, when accessing field extraction page in manager in 4.1, it doesn't work. This appears in splunkd.log

ERROR AdminManager - Admin handler 'extractions' not found'

What is this about?

1 Solution

jrodman
Splunk Employee
Splunk Employee

This is SPL-31174, there is a small flaw in the migration from 4.0 to 4.1.

For 4.1, the 'field extractions' manager UI page was modified into a sub-page of the 'fields' manager page. However, the old page is accidentally left in place.

To succesfully create and manage fields, you can simply click on the Fields link instead of Field Extractions.

To remove the bogus UI element, you can remove or rename the page element splunk/etc/apps/search/default/data/ui/manager/data_extractions.xml


Note, this problem should not occur in Splunk 4.1.5 and later.

View solution in original post

0 Karma

jrodman
Splunk Employee
Splunk Employee

This is SPL-31174, there is a small flaw in the migration from 4.0 to 4.1.

For 4.1, the 'field extractions' manager UI page was modified into a sub-page of the 'fields' manager page. However, the old page is accidentally left in place.

To succesfully create and manage fields, you can simply click on the Fields link instead of Field Extractions.

To remove the bogus UI element, you can remove or rename the page element splunk/etc/apps/search/default/data/ui/manager/data_extractions.xml


Note, this problem should not occur in Splunk 4.1.5 and later.

View solution in original post

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.