I've got 1 index and mutiple sources/sourcetypes. Is it possible to do field extractions on index level. In the fieldextractor only choices are source or sourcetype.
Nopes, the field extractions, applied in props.conf, is configured at sourcetype/source/host level.
Nopes, the field extractions, applied in props.conf, is configured at sourcetype/source/host level.