You can manually create an extracted field.

Procedure

  1. Click the two arrows icon in the upper-left corner of the screen to expand the main menu.
  2. Go to the Explore Logs page.
  3. On the Stream tab, click the three dots icon to the left of any log message.
    The Add Filter menu appears.
  4. Click Extract Field on the Add Filter menu.
    The Create Custom Field form appears.
  5. Fill in values for the field.
  6. Click Save.

Results

The new field appears on the list of fields on the Explore Logs page and can be used in filters and queries.

What to do next

You can use the extracted field to search and filter your list of log events.

You can modify saved field definitions or delete them if you no longer need them.