With splunk 4.1.6 : a user has defined a custom field extraction in the "search" app. As as admin, I have changed the permissions on that to be "all apps" with "Everyone" having read permission. Despite that, when searching within the search app., that field is still only showing as being extracted for the user who created it, not for anyone else. I then moved the field extraction to a custom app, but still cannot access it even when running searches within that app. Any suggestions? ... View more