Templates for defining fields in machine data

摘要: A field extraction template simplifies the creation of rules by providing a user with set names commonly assigned to certain type data, as well guidance on how extract values for those fields. These rules, in turn, facilitate access “chunks” or information derived from chunks, through named comprises at least and ordering data names. The indicates index positions that are associated some delimiter is specified splitting items into arrays chunks. chunk item belongs given name whose position within item's array chunks equivalent name.