Splunk Search

Alt key to add NOT no longer works on fields in V6

ashleyherbert
Communicator

We've just upgraded to V6, and one of the first things I've noticed is that you can't use the Alt-Click to add the NOT search term on fields.

It still works when you select text within an event, but not on a field (such as sourcetype or source). I'm a heavy user of this function when I'm troubleshooting issues, does anybody know if there's a new way to do this?

Thanks,

Ash

Tags (2)

kellycocat
Explorer

Just found this similar post, apparently it's a known bug in Splunkv6:

http://answers.splunk.com/answers/109473/alt-click-not-working-selected-fields

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...