When using regex for field extraction, the first thing one has to do in the field extractor is to have a field name. In line and transform field extractions require regular expressions with the names of the fields that they extract. When you set up field extractions through configuration files, one needs to provide the regular expression. One can design them so that they extract two or more fields from the events that match them. One can test one's regular expression by using the rex search command.
In inline field extractions, the regular expression is in props.conf. You have one regular expression per field extraction configuration.
In transform extractions, the regular expression is separated from the field extraction configuration. The regular expression is in transforms.conf while the field extraction is in props.conf.
Field Extractor extracts a set of default fields for each event it indexes. Field extraction can take place either before event indexing (in the case of default fields and indexed fields) or after event indexing (in the case of search fields).
Therefore, the correct answers are as given above
learn more about regex: https://brainly.com/question/27805410
#SPJ1
