We are importing Linux Syslogs and Windows NTSyslogs and fields are not getting automatically extracted. The only fields that are getting extracted are Host, Index, Date&Time, Source, and SourceType all other fields are not getting extracted. The version of Splunk we are using is 6.4.0. I am sure a Splunk upgrade would fix a lot of these issues, but it seems like it will take an act of Congress to do so. So any suggestions on how to get Splunk to recognize the fields to be extracted automatically.
~ Jason
