What is your search?
I did a dummy search like this,
index=_internal sourcetype=splunkd_ui_access
| erex METHOD examples="GET , POST"
| table METHOD
| dedup METHOD
and I was able to see logs like this
2020-05-04 17:14:29,457 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:16:15,310 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:16:15,411 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:16:55,592 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:16:55,744 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:17:18,915 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:17:20,037 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:17:31,770 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:17:41,178 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:17:53,240 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:18:00,550 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:18:03,215 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:18:04,787 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:18:07,979 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:18:08,187 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:18:10,647 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:18:12,615 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:18:14,448 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:18:16,148 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
2020-05-04 17:21:48,911 -0700 INFO erex:25 - erex run with examples: GET , POST
2020-05-04 17:21:50,206 -0700 INFO FieldLearning:62 - GENERATING RULES FROM 100 EVENTS
The log level is INFO.
... View more