There are different ways to add an attribute to an object. In this book, we will utilize extracted attributes based on fields and regular expressions. Go ahead and carry out these steps:
- Click on the Add Field dropdown and select Auto-Extracted.
- Scroll down the list of auto-extracted fields and select the fields that we have manually extracted in Chapter 2, Bringing in Data, as listed and shown in the bullet list, followed by the screenshot:
- If you look closely, you'll see Splunk has automatically classified the attributes based on assumed ...