https://community.splunk.com/t5/Getting-Data-In/field-extraction-on-index/m-p/337708#M93638 <P>Nopes, the field extractions, applied in props.conf, is configured at sourcetype/source/host level.</P> Tue, 12 Dec 2017 15:51:23 GMT somesoni2 2017-12-12T15:51:23Z https://community.splunk.com/t5/Getting-Data-In/field-extraction-on-index/m-p/337707#M93637 <P>I've got 1 index and mutiple sources/sourcetypes. Is it possible to do field extractions on index level. In the fieldextractor only choices are source or sourcetype.</P> Tue, 12 Dec 2017 15:28:15 GMT https://community.splunk.com/t5/Getting-Data-In/field-extraction-on-index/m-p/337707#M93637 Mike6960 2017-12-12T15:28:15Z https://community.splunk.com/t5/Getting-Data-In/field-extraction-on-index/m-p/337708#M93638 <P>Nopes, the field extractions, applied in props.conf, is configured at sourcetype/source/host level.</P> Tue, 12 Dec 2017 15:51:23 GMT https://community.splunk.com/t5/Getting-Data-In/field-extraction-on-index/m-p/337708#M93638 somesoni2 2017-12-12T15:51:23Z