All Apps and Add-ons

field extractor app errors

a212830
Champion

I'm trying to use the field extractor app, but when I click on the Extract Fields workflow, it gives me an error: Stacktrace: Traceback (most recent call last): File "", line 397, in initInfoFromWorkflow File "", line 494, in setCurrentIndex ModelException: Ignoring unknown index 'network'

For some reason, it doesn't find my index. I'm running a distributed environment, and this is on a search-head. Does it needs to be installed and run on an indexer? I love the idea of this app, but I've never been able to get it working properly.

Tags (1)
0 Karma
1 Solution

carasso
Splunk Employee
Splunk Employee

I fixed the problem. Update the app to 2.3.

I just updated the Field Extractor app to work in distributed environments, so it works with indexes not on the search head.

 http://apps.splunk.com/app/494/

Let me know if you see any problems.

View solution in original post

0 Karma

carasso
Splunk Employee
Splunk Employee

I fixed the problem. Update the app to 2.3.

I just updated the Field Extractor app to work in distributed environments, so it works with indexes not on the search head.

 http://apps.splunk.com/app/494/

Let me know if you see any problems.

0 Karma

jonathan_kaplan
New Member

Similar problem encountered ... within my instance, the error is:

Stacktrace: Traceback (most recent call last): File "", line 397, in initInfoFromWorkflow File "", line 494, in setCurrentIndex ModelException: Ignoring unknown index 'main'

Splunk support is declining to assist, as this is not an "official" app. If anyone is willing to collaborate on figuring this out, let me know...

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...