Hi, I wanted to extract the field "login-first" and "delaccount" from result events. Following are 2 sample fields from the results logs. cf_app_name: AB123-login-first-pr cf_app_name: CD123-delaccount-pr Sample query used : index=preprod source=logmon env="preprod" Please help me to extract the fields. Thanks in advance, SGL ... View more