We've just upgraded to V6, and one of the first things I've noticed is that you can't use the Alt-Click to add the NOT search term on fields.
It still works when you select text within an event, but not on a field (such as sourcetype or source). I'm a heavy user of this function when I'm troubleshooting issues, does anybody know if there's a new way to do this?
Thanks,
Ash
Just found this similar post, apparently it's a known bug in Splunkv6:
http://answers.splunk.com/answers/109473/alt-click-not-working-selected-fields