<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk search in Splunk Enterprise</title>
    <link>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580026#M11047</link>
    <description>&lt;P&gt;Can some one help me in building a Splunk search with the below mentioned criteria!.&lt;/P&gt;&lt;P&gt;My application contains some fields and one of the field is "Request Number". I want the search query to fetch the records which have "Request Number" as "0".&lt;/P&gt;&lt;P&gt;I have the source name, Host name etc. I'm getting other results also, But no Requet number as 0. Can someone help me out here.&lt;/P&gt;</description>
    <pubDate>Wed, 05 Jan 2022 16:17:28 GMT</pubDate>
    <dc:creator>LolabhattuA</dc:creator>
    <dc:date>2022-01-05T16:17:28Z</dc:date>
    <item>
      <title>Splunk search</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580026#M11047</link>
      <description>&lt;P&gt;Can some one help me in building a Splunk search with the below mentioned criteria!.&lt;/P&gt;&lt;P&gt;My application contains some fields and one of the field is "Request Number". I want the search query to fetch the records which have "Request Number" as "0".&lt;/P&gt;&lt;P&gt;I have the source name, Host name etc. I'm getting other results also, But no Requet number as 0. Can someone help me out here.&lt;/P&gt;</description>
      <pubDate>Wed, 05 Jan 2022 16:17:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580026#M11047</guid>
      <dc:creator>LolabhattuA</dc:creator>
      <dc:date>2022-01-05T16:17:28Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk search</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580034#M11048</link>
      <description>&lt;LI-CODE lang="markup"&gt;index=yourindex
| where 'Request Number' = 0&lt;/LI-CODE&gt;</description>
      <pubDate>Wed, 05 Jan 2022 17:09:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580034#M11048</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2022-01-05T17:09:16Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk search</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580093#M11055</link>
      <description>&lt;P&gt;This isn't returning any results.&lt;/P&gt;</description>
      <pubDate>Thu, 06 Jan 2022 07:06:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580093#M11055</guid>
      <dc:creator>LolabhattuA</dc:creator>
      <dc:date>2022-01-06T07:06:40Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk search</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580095#M11056</link>
      <description>&lt;P&gt;Please post some test data to test the query if its not sensitive data.&lt;/P&gt;</description>
      <pubDate>Thu, 06 Jan 2022 08:02:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580095#M11056</guid>
      <dc:creator>SinghK</dc:creator>
      <dc:date>2022-01-06T08:02:28Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk search</title>
      <link>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580096#M11057</link>
      <description>&lt;P&gt;Index = * | search "Request Number"=0&lt;/P&gt;</description>
      <pubDate>Thu, 06 Jan 2022 08:08:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Enterprise/Splunk-search/m-p/580096#M11057</guid>
      <dc:creator>SinghK</dc:creator>
      <dc:date>2022-01-06T08:08:00Z</dc:date>
    </item>
  </channel>
</rss>

