I've created a couple of field extractions and given read/write permissions to everyone and to appear in all apps.
But the dashboard referring these fields are not displaying these fields for other users. It can be viewed only by me as I created the field.
not sure if you got this fixed or not. i was having the same issue. the props was created in the user file only. i copid it out to the app and it is working for everyone.
user folder splunk/etc/users/user name extraction was created with/app created in/local/props.conf
copied to app folder
splunk/etc/apps/your app/local
It sounds like the extractions you created are still private. Did you promote them to the app level after you created them?
not sure if you got this fixed or not. i was having the same issue. the props was created in the user file only. i copid it out to the app and it is working for everyone.
user folder splunk/etc/users/user name extraction was created with/app created in/local/props.conf
copied to app folder
splunk/etc/apps/your app/local
What is the app context that the dashboard is in?
Same issue. I'm using Splunk Light Version 6.4.1. Users can create their own extractions that are only visible to them. Tried changing permissions on the user level extracted fields with no luck.
My local.meta from \etc\apps\search\metadata\
[props/DynamicExportCompare/REPORT-DynamicExportCompare2]
access = read : [ admin, user ], write : [ admin ]
export = system
owner = admin
version = 6.4.1
modtime = 1465571478.487277900