When you run queries that use extracted fields, you can specify which content packs to run the query against.

By default, all content pack fields are extracted after running a query. However, some of the content packs might not be relevant to the desired information, and as a result their extracted fields creates inefficiency and overhead during query processing.

To run the query more efficiently and to reduce the content pack fields' extraction timeouts, you can select only the content packs that contain the fields of interest for extraction. To specify the content packs, select them in the Content Packs drop-down menu in the Explore Logs page.