Dear,
I was following along the Lab 8 exercise of Splunk Fundamentals 2. However the field extraction failed and an unexpected result was observed. Please see the screenshots below
IP has been highlighted as 'src'
One row selects the wrong result
Add sample event and highlighting fails the extraction
I am still able to continue with the training but this might be something you want to look into.
Kind regards,
Olaf