Hello, I have records that look like this: 2012-09-24T18:31:38: ^^ AAA ^^ BBB ^^ CCC ^^^ DDD ^^^ EEE The records get parsed correctly and values are assigned to field names at index time - i.e fld1=AAA, fld2=BBB, etc. However, when you use these field/value pairs in a search, no events are returned. E.g. The search, index=xxx fld1=AAA, results in 0 events found. Any ideas on what's going on here? Thanks! ... View more

I have a search that get code values: How can I show only the count of 4 values in a chart and have the rest reported as "OTHER". ... View more