Hello,
This is what my field extraction looks like in the GUI:
Name- source::/home/user/logs/* : EXTRACT-request_id
Type- Inline
Extraction/Transform- Request\sID:\s(?P<request_id>[0-9a-zA-Z\:\.\-\@]+)
App- search
What is the best way to configure props.conf and transforms.conf for this change? What content do I need to add to both files?
Thanks