When editing an extractor it loads a random message from the bound input to test against. When I created the extractor I used a full_message from a specific type of log as several sources use this input.
I should be able to load a message to test regex/grok against instead of it randomly selecting a message from the input. Or at least tie the edit extractor page to the main extractor page where you're able to load a message id when creating a new extractor.
The text was updated successfully, but these errors were encountered: