Within the Search function, if I click on the blue down arrow and select "Extract Fields", for log source=/Library/Logs/AppleFileService/AppleFileServiceAccess.log, it opens the Extract Fields window but it's showing the log for "/var/log/samba/log.nmbd".
It's appears to be opening the wrong log for any event that I try to use Extract Fields on.
Any idea what's causing this?
I'm running version 5.0.4. Receiver on one server and a forwarder on a different server.