|
After upgrading, when accessing field extraction page in manager in 4.1, it doesn't work. This appears in splunkd.log What is this about? |
One Answer:
|
This is SPL-31174, there is a small flaw in the migration from 4.0 to 4.1. For 4.1, the 'field extractions' manager UI page was modified into a sub-page of the 'fields' manager page. However, the old page is accidentally left in place. To succesfully create and manage fields, you can simply click on the Fields link instead of Field Extractions. To remove the bogus UI element, you can remove or rename the page element Note, this problem should not occur in Splunk 4.1.5 and later. |