https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72866#M180997 <P>Here is the example how you can use IFX to extract fields:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.1/Knowledge/ExtractfieldsinteractivelywithIFX">http://docs.splunk.com/Documentation/Splunk/5.0.1/Knowledge/ExtractfieldsinteractivelywithIFX</A></P> Tue, 25 Dec 2012 04:20:42 GMT cyue_splunk 2012-12-25T04:20:42Z https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72863#M180994 <P>I have three Firewalls splunking, and I cannot see a src_ip or the URL fields in the search base.<BR /> Is there a way to get them.<BR /> I just started with Splunk so may be Don't have a lot of things required setup right now.<BR /> Any help or tips on starting Splunking that may be helpful in the future would be great.</P> <P>Thanks all<BR /> Ansh</P> Mon, 24 Dec 2012 19:51:09 GMT https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72863#M180994 vistasyslog 2012-12-24T19:51:09Z https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72864#M180995 <P>Click he small triangle symbol at the beginning of any event and use the Interactive Field Extract page to extract/define your src_ip or URL fields.</P> Tue, 25 Dec 2012 03:53:13 GMT https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72864#M180995 cyue_splunk 2012-12-25T03:53:13Z https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72865#M180996 <P>Thanks for the answer, but I still cannot find the fields.<BR /> Is there a syntax that I need to put in ?<BR /> Can you give me an example of it ?</P> <P>Thanks</P> Tue, 25 Dec 2012 04:05:31 GMT https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72865#M180996 vistasyslog 2012-12-25T04:05:31Z https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72866#M180997 <P>Here is the example how you can use IFX to extract fields:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0.1/Knowledge/ExtractfieldsinteractivelywithIFX">http://docs.splunk.com/Documentation/Splunk/5.0.1/Knowledge/ExtractfieldsinteractivelywithIFX</A></P> Tue, 25 Dec 2012 04:20:42 GMT https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72866#M180997 cyue_splunk 2012-12-25T04:20:42Z https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72867#M180998 <P>Great. Thanks for your help.</P> Tue, 25 Dec 2012 04:32:24 GMT https://community.splunk.com/t5/Splunk-Search/No-URL-field-in-the-Search-base/m-p/72867#M180998 vistasyslog 2012-12-25T04:32:24Z