You can manually create an extracted field.

Procedure

  1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
  2. Go to the Explore Logs page.
  3. On the Stream tab, click the three dots icon to the left of any log message.
    The Add Filter menu appears.
  4. Click Extract Field on the Add Filter menu.
    The Extract Field form appears.
  5. Enter the following values for the field.
    • Name of the field in the Field Name text box
    • The field type and regular expression value in the Value (regex) section
    • The pre and post context regular expressions in the Location Context section
    • Keywords in the Additional Context section
  6. Click Save.

Results

The new field appears on the list of fields on the Explore Logs page and can be used in filters and queries.

What to do next

You can use the extracted field to search and filter your list of log events.

You can modify saved field definitions or delete them if you no longer need them.