https://community.splunk.com/t5/Splunk-Search/Field-extraction/m-p/83761#M21336 <P>Hi,</P> <P>I am using props.conf to do field extraction and looks like working fine.<BR /> But I don't see them in Search APP..However, I am seeing them in sample_log search head.<BR /> here is example:</P> <P>props conf:</P> <P>[sample_log]<BR /> EXTRACT-<USERHOME> = USER\sHOME:\s(?<USERHOME>\w:[\w|\|\w|\s]*)</USERHOME></USERHOME></P> <P>when I use "Search APP"; I don't see the Extract field but if I open "sample_dev_searchhead", I can see it. How can I configure the extract fields so that they can be seen in any App?</P> <P>Thank You.</P> Mon, 28 Sep 2020 12:35:15 GMT gudavasr 2020-09-28T12:35:15Z https://community.splunk.com/t5/Splunk-Search/Field-extraction/m-p/83761#M21336 <P>Hi,</P> <P>I am using props.conf to do field extraction and looks like working fine.<BR /> But I don't see them in Search APP..However, I am seeing them in sample_log search head.<BR /> here is example:</P> <P>props conf:</P> <P>[sample_log]<BR /> EXTRACT-<USERHOME> = USER\sHOME:\s(?<USERHOME>\w:[\w|\|\w|\s]*)</USERHOME></USERHOME></P> <P>when I use "Search APP"; I don't see the Extract field but if I open "sample_dev_searchhead", I can see it. How can I configure the extract fields so that they can be seen in any App?</P> <P>Thank You.</P> Mon, 28 Sep 2020 12:35:15 GMT https://community.splunk.com/t5/Splunk-Search/Field-extraction/m-p/83761#M21336 gudavasr 2020-09-28T12:35:15Z https://community.splunk.com/t5/Splunk-Search/Field-extraction/m-p/83762#M21337 <P>You'll want to go to Manager » Fields » Field extractions, find your extraction and change the permissions to be global.</P> Mon, 08 Oct 2012 23:35:55 GMT https://community.splunk.com/t5/Splunk-Search/Field-extraction/m-p/83762#M21337 sdaniels 2012-10-08T23:35:55Z