What is a nested field?
When a packed class contains an instance field that is a packed type, the data for that field is packed directly into the containing class. The field is known as a nested field .
How do you make a nested field?
To insert a nested field, create a parent field with a placeholder for a nested field. Then, find the placeholder text and replace it with the nested field code in the code range of the parent field.
How do I extract a field in Splunk?
Access the field extractor from the All Fields dialog box
To get the full set of source types in your Splunk deployment, go to the Field Extractions page in Settings. Run a search that returns events. At the top of the fields sidebar, click All Fields. In the All Fields dialog box, click Extract new fields.