When Splunk software extracts fields - Splunk Documentation
docs.splunk.com