I have a problem creating new search time field extractions using the Splunk's REST API and the Java SDK.
This is the java code.
RequestMessage reqMsg = new RequestMessage();
reqMsg.setMethod("post");
reqMsg.setContent("name=firstname&stanza=sexuality&type=EXTRACT&value=(?i)^[^,]*,\w+=(?P
ResponseMessage resMsg = authService.send("/servicesNS/admin/search/data/props/extractions",reqMsg);
The result was an error :
HTTP 500 -- In handler 'props-extract': Data could not be written: /admin/search/props/sexuality/EXTRACT-firstname: (?i)^[^,]*,\w
How do i fix this so that i can create a new search time field extraction through the REST API using Java ?? and i also cannot create the extraction on the IFX the error still persists.
please see my answer to your other similar question: