https://community.splunk.com/t5/Splunk-Dev/How-to-query-extracted-field-using-SplunkJS/m-p/422875#M7455 <P>Hi I have extracted few fields using Regex from logs in Splunk. I can do search on those fields successfully in Splunk WebUI. I want to use the same queries uisng SplunkJS in my Webapp. Every time I add the extracted fields in the SearchManager's search query on my page, I get No result found. <BR /> How can I resolve this issue and continue to use SplunkJS in my webapp?</P> Tue, 23 Apr 2019 20:31:38 GMT AshChakor 2019-04-23T20:31:38Z https://community.splunk.com/t5/Splunk-Dev/How-to-query-extracted-field-using-SplunkJS/m-p/422875#M7455 <P>Hi I have extracted few fields using Regex from logs in Splunk. I can do search on those fields successfully in Splunk WebUI. I want to use the same queries uisng SplunkJS in my Webapp. Every time I add the extracted fields in the SearchManager's search query on my page, I get No result found. <BR /> How can I resolve this issue and continue to use SplunkJS in my webapp?</P> Tue, 23 Apr 2019 20:31:38 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-query-extracted-field-using-SplunkJS/m-p/422875#M7455 AshChakor 2019-04-23T20:31:38Z https://community.splunk.com/t5/Splunk-Dev/How-to-query-extracted-field-using-SplunkJS/m-p/422876#M7456 <P>Ok I found a work around for this. I used regex expression to extract fields and its producing the same output just as in splunkUI with extracted or transformed fields. <BR /> Splunk UI Extracted field : EXTRACT-TransUID Inline ^[^[\n]*[(?P<TRANSUID>[^]]+) </TRANSUID></P> <P>SplunkUI search: index="myindex" host="myhost" | transaction TransUID </P> <P>When I used the above search in my webapplication uisng SplunkJS, it wouldn't work.<BR /> So I used regex as below in the search and its working just as it did in SplunkUI <BR /> 'index="myindex" host="myhost" | rex field=_raw "^[^[\n]*\[(?P&lt;TransUIDTest&gt;[^]]+)" | transaction TransUIDTest'</P> Thu, 25 Apr 2019 12:54:31 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-query-extracted-field-using-SplunkJS/m-p/422876#M7456 AshChakor 2019-04-25T12:54:31Z