https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21669#M96524 <P>It indexes all the raw data, your field extractions are applied at search-time. It doesn't matter when the extraction was defined in relation to the indexing.</P> Thu, 01 Aug 2013 11:02:19 GMT martin_mueller 2013-08-01T11:02:19Z https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21668#M96523 <P>hi,<BR /> How indexing is done in splunk ? does it indexes all the raw data? if i extract some field after uploading data into splunk will those fields will be indexed?</P> <P>Thanks and regards</P> Thu, 01 Aug 2013 10:54:02 GMT https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21668#M96523 ChhayaV 2013-08-01T10:54:02Z https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21669#M96524 <P>It indexes all the raw data, your field extractions are applied at search-time. It doesn't matter when the extraction was defined in relation to the indexing.</P> Thu, 01 Aug 2013 11:02:19 GMT https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21669#M96524 martin_mueller 2013-08-01T11:02:19Z https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21670#M96525 <P>After the data is indexed, it will not be indexed anymore even if there are any manipulation on the data.</P> Thu, 01 Aug 2013 11:29:52 GMT https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21670#M96525 linu1988 2013-08-01T11:29:52Z https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21671#M96526 <P>Furthermore, different apps and different users can have their own individual ways of extracting fields from the <EM>same</EM> indexed data!</P> Thu, 01 Aug 2013 12:48:25 GMT https://community.splunk.com/t5/Getting-Data-In/Indexing-in-splunk/m-p/21671#M96526 sowings 2013-08-01T12:48:25Z