https://community.splunk.com/t5/Splunk-Search/The-bug-of-fields-extraction-in-Splunk-Web/m-p/491915#M137280 <P>Hi, Splunkers:</P> <P>I found a bug of fields extraction in Splunk Web like following picture:<BR /> <IMG src="https://community.splunk.com/storage/temp/279749-feild-extraction-bug.png" alt="alt text" /><BR /> As you can see, I was extract the v2ray_access_method which has the value : "tcp" OR "", and the next field is v2ray_access_ip.<BR /> When I click the tag "v2ray_access_method" after "Events", there will be only shows "tcp" in the list but there are some IP shows in blue in the tag "Event". So I think maybe there is a bug in the fields extractor fuctions.</P> Wed, 30 Sep 2020 03:49:33 GMT aojie654 2020-09-30T03:49:33Z https://community.splunk.com/t5/Splunk-Search/The-bug-of-fields-extraction-in-Splunk-Web/m-p/491915#M137280 <P>Hi, Splunkers:</P> <P>I found a bug of fields extraction in Splunk Web like following picture:<BR /> <IMG src="https://community.splunk.com/storage/temp/279749-feild-extraction-bug.png" alt="alt text" /><BR /> As you can see, I was extract the v2ray_access_method which has the value : "tcp" OR "", and the next field is v2ray_access_ip.<BR /> When I click the tag "v2ray_access_method" after "Events", there will be only shows "tcp" in the list but there are some IP shows in blue in the tag "Event". So I think maybe there is a bug in the fields extractor fuctions.</P> Wed, 30 Sep 2020 03:49:33 GMT https://community.splunk.com/t5/Splunk-Search/The-bug-of-fields-extraction-in-Splunk-Web/m-p/491915#M137280 aojie654 2020-09-30T03:49:33Z https://community.splunk.com/t5/Splunk-Search/The-bug-of-fields-extraction-in-Splunk-Web/m-p/491916#M137281 <P>When you post a question, if you choose to use images, ALSO POST TEXT. We need the search SPL, sample log events, etc. I for one, am done transposing pictures.</P> Tue, 28 Jan 2020 02:27:20 GMT https://community.splunk.com/t5/Splunk-Search/The-bug-of-fields-extraction-in-Splunk-Web/m-p/491916#M137281 woodcock 2020-01-28T02:27:20Z