<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Putting 20 host names in a tag and searching in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239507#M46552</link>
    <description>&lt;P&gt;If you search for tag=xyz with no stats command, do you see any results?&lt;BR /&gt;
If you search for any of the hosts you have tagged, do your results show that your hosts are tagged?  &lt;/P&gt;</description>
    <pubDate>Thu, 05 May 2016 15:52:57 GMT</pubDate>
    <dc:creator>Jeremiah</dc:creator>
    <dc:date>2016-05-05T15:52:57Z</dc:date>
    <item>
      <title>Putting 20 host names in a tag and searching</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239506#M46551</link>
      <description>&lt;P&gt;I have 20 host names and I want to use tags.&lt;/P&gt;

&lt;P&gt;I've been doing my searches host=X OR host=Y OR host=Z, but I want to use tags instead since it is much easier on the eyes in a search string.&lt;/P&gt;

&lt;P&gt;Let's say I create a tag called xyz with host=X, host=Y, host=Z. &lt;/P&gt;

&lt;P&gt;To search on this, I am trying to use "tag=xyz | stats count by host" but I am getting no results. I have also tried searching "tag::host=xyz | stats count by host" and I am still getting no results. &lt;/P&gt;

&lt;P&gt;What am I doing wrong here?&lt;/P&gt;</description>
      <pubDate>Thu, 05 May 2016 15:23:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239506#M46551</guid>
      <dc:creator>mmensch</dc:creator>
      <dc:date>2016-05-05T15:23:44Z</dc:date>
    </item>
    <item>
      <title>Re: Putting 20 host names in a tag and searching</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239507#M46552</link>
      <description>&lt;P&gt;If you search for tag=xyz with no stats command, do you see any results?&lt;BR /&gt;
If you search for any of the hosts you have tagged, do your results show that your hosts are tagged?  &lt;/P&gt;</description>
      <pubDate>Thu, 05 May 2016 15:52:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239507#M46552</guid>
      <dc:creator>Jeremiah</dc:creator>
      <dc:date>2016-05-05T15:52:57Z</dc:date>
    </item>
    <item>
      <title>Re: Putting 20 host names in a tag and searching</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239508#M46553</link>
      <description>&lt;P&gt;The simplest thing to do is to create an &lt;CODE&gt;eventtype&lt;/CODE&gt;  There will be a field called &lt;CODE&gt;Search string&lt;/CODE&gt; where you paste your search and a field called &lt;CODE&gt;Tag(s)&lt;/CODE&gt; where you paste your tag  name.  Done!&lt;/P&gt;</description>
      <pubDate>Thu, 05 May 2016 16:30:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239508#M46553</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2016-05-05T16:30:58Z</dc:date>
    </item>
    <item>
      <title>Re: Putting 20 host names in a tag and searching</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239509#M46554</link>
      <description>&lt;P&gt;I'm not seeing the tag.. when just doing a host=X...&lt;/P&gt;

&lt;P&gt;Also, is there a limit on how many hosts can be in the tag?&lt;/P&gt;</description>
      <pubDate>Thu, 05 May 2016 16:37:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Putting-20-host-names-in-a-tag-and-searching/m-p/239509#M46554</guid>
      <dc:creator>mmensch</dc:creator>
      <dc:date>2016-05-05T16:37:27Z</dc:date>
    </item>
  </channel>
</rss>

