https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204107#M59296 <P>I am running the same query.</P> <P>Resolved the issue:</P> <P>Issue: Autoextraction was not working.</P> <P>Workaround : Tried extracting the fields using regular expression and was able to extract the same</P> Fri, 01 Jan 2016 09:03:20 GMT pradiptam 2016-01-01T09:03:20Z https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204105#M59294 <P>Hi,</P> <P>I was able to run search queries in Splunk and the fields were getting automatically extracted in the Interesting Fields and depending upon that we were able to modify queries.</P> <P>But currently i am able to run the queries and getting results, but the fields are not getting listed under the " Interesting Fields ". </P> <P>I am not able to figure out the issue, is any settings have changed or not? Please share some thoughts on the same.</P> <P>Regards,</P> <P>Pradipta</P> Fri, 01 Jan 2016 07:26:10 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204105#M59294 pradiptam 2016-01-01T07:26:10Z https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204106#M59295 <P>Is that you are running the same query as used before or anything else?</P> Fri, 01 Jan 2016 07:48:01 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204106#M59295 kamaleshwar 2016-01-01T07:48:01Z https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204107#M59296 <P>I am running the same query.</P> <P>Resolved the issue:</P> <P>Issue: Autoextraction was not working.</P> <P>Workaround : Tried extracting the fields using regular expression and was able to extract the same</P> Fri, 01 Jan 2016 09:03:20 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204107#M59296 pradiptam 2016-01-01T09:03:20Z https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204108#M59297 <P>If you were able to see the fields before and not now, then most probably it's due to different search mode unless your raw events are changed.</P> <P>See here for information : <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Search/Changethesearchmode">http://docs.splunk.com/Documentation/Splunk/6.2.0/Search/Changethesearchmode</A></P> Fri, 01 Jan 2016 09:29:15 GMT https://community.splunk.com/t5/Splunk-Search/Regarding-autoextraction-of-Fields-in-Splunk/m-p/204108#M59297 renjith_nair 2016-01-01T09:29:15Z