search field

search field

A field that is extracted at search time automatically or with the help of custom field extraction configurations, the field extractor, or search commands such as rex.

Fields that are extracted during event data processing and indexing are referred to as default fields or indexed fields.

For more information

In the Knowledge Manager Manual:

• About fields

In Managing Indexers and Clusters of Indexers:

• Index time versus search time