After upgrade to splunk 4.1, I try to access the field extractions page in manager, and it doesn't work.

[jrodman]

After upgrading, when accessing field extraction page in manager in 4.1, it doesn't work. This appears in splunkd.log

ERROR AdminManager - Admin handler 'extractions' not found'

What is this about?

[jrodman · Accepted solution]

This is SPL-31174, there is a small flaw in the migration from 4.0 to 4.1.

For 4.1, the 'field extractions' manager UI page was modified into a sub-page of the 'fields' manager page. However, the old page is accidentally left in place.

To succesfully create and manage fields, you can simply click on the Fields link instead of Field Extractions.

To remove the bogus UI element, you can remove or rename the page element splunk/etc/apps/search/default/data/ui/manager/data_extractions.xml

---

Note, this problem should not occur in Splunk 4.1.5 and later.