Skip to main content
Sumo Logic

Run a Search Against Extracted Fields

When running a search against Extracted Fields, you'll need to include the Scope associated with a Field Extraction Rule.

You can use the Scope to set up schedules searches, Real Time Alert, or even in a Panel. Ad hoc searches are just the beginning.

Run a search against Extracted Fields

  1. Choose Manage > Field Extraction.
  2. In the search box, click Search next to the Fields of the rule you'd like to run.

    Field_Extraction_Search_Fields_747x40.png
    Once the search is complete, you can save it, schedule it, or add it to a Dashboard.

Verify the scope of an Extraction Rule

  1. Choose Manage > Field Extraction.
  2. In the search box, click Search next to the Scope of the rule you'd like to run.

Once the search is complete, you can save it, schedule it, or add it to a Dashboard.