topic Re: IFX question in Splunk Dev

IFX question

xvxt006 — Thu, 05 Sep 2013 20:50:23 GMT

Hi,

When i try to extract a field using IFX, the event in which the highlighted filed is not showing up in the newly opened window. So can't even generate a regex for that value. Any suggestions please? i also heard there is advanced version of IFX (i think standalone App). if anyone has link to that can you please give that?

Re: IFX question

sdaniels — Thu, 05 Sep 2013 20:57:24 GMT

Hard to understand what's happening given the details.

However, here is the app that you were referring to:

http://apps.splunk.com/app/494

Re: IFX question

xvxt006 — Mon, 28 Sep 2020 14:43:07 GMT

Thank you for the App. My question is..One more time 🙂

say we have the below event and i want to extract ReadyToSubmitToFraud. So i selected that and clicked on "Extract field" from the dropdown on the left which opens IFX in another window and gives sample events. In the sample Events it does not have the event i have the field. So how can i generate the regex

2013-09-05 15:55:02,403 INFO 10.81.193.150 [AbstractOrderSubmitJob] {"order_status_counts":{"Fraud":"69","ReadyToSubmitToFraud":"962",