In Controller < 4.3, you could extract fields from logs in the Controller UI. This is described on the Create Extracted Fields from Logs page. This option is not available >= 4.3. It is replaced entirely by Field Extraction in the Centralized Log Management UI. See Configure Log Analytics Using Source Rules for details.

Fields that were extracted by this mechanism in previous versions appear in the Extracted Fields list. Hovering over the field reveals a View icon. Click the View icon to delete the field or to see the configuration details:

• Regular expression used to extract the field

• Field name

• Field type

• Source type