Splunk Search

Splunk TA for Citrix NetScaler


Hello All,

I installed the Splunk Add-on for Citrix NetScaler


And I do not see the field extractions unless I am in the Add-on in the UI. So if I bring up search and reporting and then do a search on the NetScaler index I would expect to see all the extracted fields from the Add-on.

View from search and reporting
alt text

View from a search under the add-on
alt text

So what am I missing that would allow me to see all the fields in other apps? I have set the permissions to be readable by everyone and sharing set to all apps. So I am not sure what is wrong here.


0 Karma

Path Finder

edwardrose Did you ever get an answer to this question? I am having a similar issue.

0 Karma



it looks like a permission issue:

Go to "Manage Apps" and find the "Splunk Add-On for Citrix NetScaler", then click on "Permissions" and below change it from "This app only" to "All apps"

0 Karma