<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Why isn't Node App I wrote using Javascript SDK filtering on extracted fields when searching? in Splunk Dev</title>
    <link>https://community.splunk.com/t5/Splunk-Dev/Why-isn-t-Node-App-I-wrote-using-Javascript-SDK-filtering-on/m-p/420338#M7375</link>
    <description>&lt;P&gt;Hello,&lt;BR /&gt;
I am using JS SDK for Splunk, and have written a Node App.  Now when I do a search, I get the results back, but I would like to remove duplicates and would like to use &lt;CODE&gt;dedup&lt;/CODE&gt; on extracted fields. When I use this it does not work, but the same search string works fine on GUI and returns unique events.&lt;BR /&gt;
When I use head , it works, but when I use dedup i get no results.&lt;BR /&gt;
Splunk "version":"6.5.2"&lt;/P&gt;

&lt;P&gt;Search String : &lt;CODE&gt;search index=aaa filter1 filter2  | dedup  extractedField1&lt;/CODE&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 23 Aug 2018 16:28:08 GMT</pubDate>
    <dc:creator>rajparekh16</dc:creator>
    <dc:date>2018-08-23T16:28:08Z</dc:date>
    <item>
      <title>Why isn't Node App I wrote using Javascript SDK filtering on extracted fields when searching?</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/Why-isn-t-Node-App-I-wrote-using-Javascript-SDK-filtering-on/m-p/420338#M7375</link>
      <description>&lt;P&gt;Hello,&lt;BR /&gt;
I am using JS SDK for Splunk, and have written a Node App.  Now when I do a search, I get the results back, but I would like to remove duplicates and would like to use &lt;CODE&gt;dedup&lt;/CODE&gt; on extracted fields. When I use this it does not work, but the same search string works fine on GUI and returns unique events.&lt;BR /&gt;
When I use head , it works, but when I use dedup i get no results.&lt;BR /&gt;
Splunk "version":"6.5.2"&lt;/P&gt;

&lt;P&gt;Search String : &lt;CODE&gt;search index=aaa filter1 filter2  | dedup  extractedField1&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 23 Aug 2018 16:28:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/Why-isn-t-Node-App-I-wrote-using-Javascript-SDK-filtering-on/m-p/420338#M7375</guid>
      <dc:creator>rajparekh16</dc:creator>
      <dc:date>2018-08-23T16:28:08Z</dc:date>
    </item>
  </channel>
</rss>

