https://community.splunk.com/t5/Knowledge-Management/Tag-from-cli-or-search/m-p/54260#M526 <P>Is it possible to auto-tag a field from the results of a search from the cli or the search bar? Something like:</P> <P>"search color=scarlet OR color=crimson | tag tag::color=red"</P> Thu, 19 Jan 2012 01:06:48 GMT swdonline 2012-01-19T01:06:48Z https://community.splunk.com/t5/Knowledge-Management/Tag-from-cli-or-search/m-p/54260#M526 <P>Is it possible to auto-tag a field from the results of a search from the cli or the search bar? Something like:</P> <P>"search color=scarlet OR color=crimson | tag tag::color=red"</P> Thu, 19 Jan 2012 01:06:48 GMT https://community.splunk.com/t5/Knowledge-Management/Tag-from-cli-or-search/m-p/54260#M526 swdonline 2012-01-19T01:06:48Z https://community.splunk.com/t5/Knowledge-Management/Tag-from-cli-or-search/m-p/54261#M527 <P>Hi,</P> <P>It's not possible to do it automatically you can do it through the Splunk Web interface:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/User/TagAndAliasFieldValues#How_to_tag_and_alias_field_values" target="_blank">http://docs.splunk.com/Documentation/Splunk/latest/User/TagAndAliasFieldValues#How_to_tag_and_alias_field_values</A></P> <P>Also if you are running 4.3 you can do some dynamic tagging from the event viewer data:</P> <P>See <A href="http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Tagthehostfield" target="_blank">http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Tagthehostfield</A></P> <P>Thanks,</P> <P>Kate</P> Mon, 28 Sep 2020 10:21:15 GMT https://community.splunk.com/t5/Knowledge-Management/Tag-from-cli-or-search/m-p/54261#M527 Kate_Lawrence-G 2020-09-28T10:21:15Z