Thank you so much....it is the little things 🙂 Also helps if I use End-Start instead Start-End.... ... View more

Hello, i am getting the same error but i am using source type that has a forward slash. See error below: Splunk could not perform action for resource data/props/extractions (404, 'Splunk cannot find "data/props/extractions//nrc/prod/rtp/bi/api : EXTRACT-Exception_Code". [HTTP 404] https://127.0.0.1:8089/servicesNS/klynch/search/data/props/extractions/%252Fnrc%252Fprod%252Frtp%252Fbi%252Fapi%20%3A%20EXTRACT-Exception_Code?safe_encoding=1; [{\'type\': \'ERROR\', \'code\': None, \'text\': \'Could not find object id=/nrc/prod/rtp/bi/api : EXTRACT-Exception_Code\'}]') I notice that there are two // in the path leading up to the props entry.... The odd thing is that the extract works, I just cannot edit the entry from the fields extraction page. I need to make the permissions global to all users.       ... View more