Trying to add filter to stream, so that 'http_method' would match "POST".
While editing stream - added filter:
"http.method", "exactly matches" - but "Value" field is disabled and clicking on small pencil icon doesn't do anything.
Tried doing the same with another browser - same result - cannot add/edit values for filters - value field always disabled.
How can i add/edit filters for streams?
I believe this is fixed now in 6.1.1. Please see http://docs.splunk.com/Documentation/StreamApp/latest/ReleaseNotes/FixedProblems (STREAM-1527 may apply to other browsers/versions as well).
I found that on different deployment - this feature works. I used RPM-based install on the working one.
On non-working I used TAR-based install.
So maybe it's something to do with permissions. To overcome that I manually edited .conf file where filters are actually reside and restarted splunk to activate that.
Gleb
This seems to work for certain browsers/versions but not others. It is a known bug that we believe is fixed in the soon-to-be-released 6.1.1 maintenance release.
Actually that may be the cause - as second (working) setup uses older browsers (QA server within financial company - older browsers are a norm here) vs. non-working setup is my home-based.
Looking forward to update.