https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-determine-what-are-my-most-expensive-field/m-p/333062#M99053 <P>Try <A href="https://regex101.com">https://regex101.com</A></P> <P>It gives something like:</P> <P>1 match, 3 steps (~310ms)</P> Tue, 31 Oct 2017 13:06:39 GMT peterchenadded 2017-10-31T13:06:39Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-determine-what-are-my-most-expensive-field/m-p/333061#M99052 <P>All, </P> <P>How can I determine which search time field extractions are my most costly? </P> Wed, 25 Oct 2017 04:52:22 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-determine-what-are-my-most-expensive-field/m-p/333061#M99052 daniel333 2017-10-25T04:52:22Z https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-determine-what-are-my-most-expensive-field/m-p/333062#M99053 <P>Try <A href="https://regex101.com">https://regex101.com</A></P> <P>It gives something like:</P> <P>1 match, 3 steps (~310ms)</P> Tue, 31 Oct 2017 13:06:39 GMT https://community.splunk.com/t5/Splunk-Search/Is-there-a-way-to-determine-what-are-my-most-expensive-field/m-p/333062#M99053 peterchenadded 2017-10-31T13:06:39Z