inline field extraction

inline field extraction

noun

A type of extraction that allows you to use one regular expression to extract multiple fields or create a new field by configuring an extraction. You can find information about when to use inline field extractions in the Configure custom fields at search time topic.

Related terms

• automatic key-value field extraction
• transform field extraction

For more information

In the Knowledge Manager Manual:

• Use the field extractions page in Splunk Web
• Configure inline extractions
• Configure custom fields at search time

In the Admin Manual:

• props.conf