topic Re: Sharing Field extractions in Splunk Search https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304620#M91560 <P>Field extractions are relative to sourcetype. You can duplicate the extraction to the new sourcetype and it will work</P> Thu, 22 Feb 2018 14:39:31 GMT skoelpin 2018-02-22T14:39:31Z Sharing Field extractions https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304619#M91559 <P>I can't for the life of me get one of the search app field extractions to also pick up the same regex (field extraction) on another sourcetype - I've made sure all the permissions are set to global for the extraction, and restarted splunk.</P> <P>Can anyone offer any help?</P> Thu, 22 Feb 2018 13:49:31 GMT https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304619#M91559 tb5821 2018-02-22T13:49:31Z Re: Sharing Field extractions https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304620#M91560 <P>Field extractions are relative to sourcetype. You can duplicate the extraction to the new sourcetype and it will work</P> Thu, 22 Feb 2018 14:39:31 GMT https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304620#M91560 skoelpin 2018-02-22T14:39:31Z Re: Sharing Field extractions https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304621#M91561 <P>There doesn't appear to be an easy way at least within splunk web to clone extractions? </P> Thu, 22 Feb 2018 14:45:14 GMT https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304621#M91561 tb5821 2018-02-22T14:45:14Z Re: Sharing Field extractions https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304622#M91562 <P>Go to <CODE>Settings&gt;Fields</CODE> and find your field. Copy the regular expression, then create new. You should then paste this regex and tie it to your new sourcetype </P> Thu, 22 Feb 2018 14:59:37 GMT https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304622#M91562 skoelpin 2018-02-22T14:59:37Z Re: Sharing Field extractions https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304623#M91563 <P>Did this work for you?</P> Tue, 27 Feb 2018 14:28:30 GMT https://community.splunk.com/t5/Splunk-Search/Sharing-Field-extractions/m-p/304623#M91563 skoelpin 2018-02-27T14:28:30Z