Regex Extract function extract fields with regex named groups. These will be index-time fields for Splunk events. Fields that start with
__ (double underscore) are special fields in Cribl. They are ephemeral and can be used by any function downstream but will not be added to events and will not exit the pipeline.