https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-for-Regex/m-p/247418#M45147 <P>Go to Settings -&gt; Fields -&gt; Field Extractions. There you can store field extractions for sourcetype, source, or host values that will then get applied to every search you run without a need to call rex over and over.</P> Mon, 14 Mar 2016 17:38:10 GMT martin_mueller 2016-03-14T17:38:10Z https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-for-Regex/m-p/247417#M45146 <P>I have a long query, in it I'm doing rex to extract fields but i need to make rex, flexible depending on data source.</P> <P>Because depending on the data source I will have to use different regex, and I am wondering if there is anyway to store all of my predefined regex and assign them a token to be able to call upon later within a query. </P> Mon, 14 Mar 2016 16:12:54 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-for-Regex/m-p/247417#M45146 RogueMrSmith 2016-03-14T16:12:54Z https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-for-Regex/m-p/247418#M45147 <P>Go to Settings -&gt; Fields -&gt; Field Extractions. There you can store field extractions for sourcetype, source, or host values that will then get applied to every search you run without a need to call rex over and over.</P> Mon, 14 Mar 2016 17:38:10 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Tokens-for-Regex/m-p/247418#M45147 martin_mueller 2016-03-14T17:38:10Z