It't from Field Extractor (FX) "If you manually edit and then preview the regular expression below, you cannot return to the automatic field extraction workflow."
B. The user is unable to return to the automatic field extraction workflow.
Manual Editing Impact: According to the Splunk documentation, when a user manually edits the regular expression in the Field Extractor, it takes them out of the automatic field extraction workflow. This is supported by result which states, "You can manually edit the regular expression. However, doing this takes you out of the field extractor workflow. When you save your changes to the field extraction, the field extractor takes you to the final Save step."
Preview Limitation: The documentation also mentions that you can only return to the field extractor workflow if you have not yet tried to preview a regular expression change. Once you preview the change, the option to go back is no longer available.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
PeManSen
4 days, 7 hours agofreeolive_guru
4 months, 1 week agoSnakeTech
5 months, 2 weeks agoMShubo
5 months, 3 weeks agoMartinCaplan
9 months, 1 week agoMartinCaplan
9 months, 1 week ago