https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67386#M16846 <P>How can I check if my custom fields work ? How can I list the content of custom fields ?</P> <P>Thank you</P> <P>Markus</P> Tue, 30 Aug 2011 23:16:43 GMT huaraz 2011-08-30T23:16:43Z https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67386#M16846 <P>How can I check if my custom fields work ? How can I list the content of custom fields ?</P> <P>Thank you</P> <P>Markus</P> Tue, 30 Aug 2011 23:16:43 GMT https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67386#M16846 huaraz 2011-08-30T23:16:43Z https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67387#M16847 <P>One simple way is to involve your custom fields in some stats command, for instance <CODE>top</CODE>:</P> <PRE><CODE>&lt;yoursearch&gt; | top custom_field </CODE></PRE> Wed, 31 Aug 2011 06:28:26 GMT https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67387#M16847 Ayn 2011-08-31T06:28:26Z https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67388#M16848 <P>They will also be displayed in the "field picker." If the REGEX or DELIM in your props.conf/transforms.conf isn't working properly, then the field won't show up. </P> <P>If the fields are showing, make sure you click on the field name to display its top values. This will give you a good sense of whether they are being extracted properly.</P> Wed, 31 Aug 2011 12:56:19 GMT https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67388#M16848 Greg_LeBlanc 2011-08-31T12:56:19Z https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67389#M16849 <P>It seems I have an error somewhere as the output is 0 and I don't have the field in the field picker. How can I debug field extraction ?</P> <P>Markus</P> Wed, 31 Aug 2011 21:52:07 GMT https://community.splunk.com/t5/Splunk-Search/Custom-fields/m-p/67389#M16849 huaraz 2011-08-31T21:52:07Z