https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75639#M19128 <P>See here: <CODE><A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/Data/Extractfieldsfromfileheadersatindextime#Enable_automatic_header-based_field_extraction" target="test_blank">http://docs.splunk.com/Documentation/Splunk/4.3.4/Data/Extractfieldsfromfileheadersatindextime#Enable_automatic_header-based_field_extraction</A></CODE></P> <P>And for a different way see : <CODE><A href="http://splunk-base.splunk.com/answers/60316/how-to-enable-automatic-header-based-field-extraction" target="test_blank">http://splunk-base.splunk.com/answers/60316/how-to-enable-automatic-header-based-field-extraction</A></CODE></P> Sat, 29 Sep 2012 13:00:11 GMT alacercogitatus 2012-09-29T13:00:11Z https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75638#M19127 <P>can any one know how to do it?</P> Sat, 29 Sep 2012 10:51:08 GMT https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75638#M19127 Tridi123 2012-09-29T10:51:08Z https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75639#M19128 <P>See here: <CODE><A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/Data/Extractfieldsfromfileheadersatindextime#Enable_automatic_header-based_field_extraction" target="test_blank">http://docs.splunk.com/Documentation/Splunk/4.3.4/Data/Extractfieldsfromfileheadersatindextime#Enable_automatic_header-based_field_extraction</A></CODE></P> <P>And for a different way see : <CODE><A href="http://splunk-base.splunk.com/answers/60316/how-to-enable-automatic-header-based-field-extraction" target="test_blank">http://splunk-base.splunk.com/answers/60316/how-to-enable-automatic-header-based-field-extraction</A></CODE></P> Sat, 29 Sep 2012 13:00:11 GMT https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75639#M19128 alacercogitatus 2012-09-29T13:00:11Z https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75640#M19129 <P>If this has answered your question, please accept it. Thanks!</P> Mon, 05 Nov 2012 21:46:42 GMT https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75640#M19129 alacercogitatus 2012-11-05T21:46:42Z https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75641#M19130 <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Data/Extractfieldsfromfileheadersatindextime">http://docs.splunk.com/Documentation/Splunk/latest/Data/Extractfieldsfromfileheadersatindextime</A></P> Thu, 13 Feb 2014 15:02:22 GMT https://community.splunk.com/t5/Splunk-Search/automatic-header-based-extraction/m-p/75641#M19130 ogdin 2014-02-13T15:02:22Z