Splunk search for Field extractions in props.conf
Copy
| rest /services/data/props/extractions | table stanza type attribute value | sort stanza
This search will show you all of the field extractions that are found in any props.conf. In order to run this search you must have the rest_properties_get capability.
0 comments
[0]
[0]
[0]
[0]
Sign in or Register to submit a comment