https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-search-from-raw-logs-quot-I-want-to-extract-a/m-p/532245#M36205 <P>There's a reason why the Body field is so much bigger than the Subject field in postings and that's so we can put a lot more information into the body to help explain the problem we want to solve.</P><P>Are you looking for "severity=40" or "I want to extract a string in the format "severity" = "40"" or other variant?</P><P>Have you tried typing the string you want to find into the search bar?</P> Mon, 07 Dec 2020 21:22:14 GMT richgalloway 2020-12-07T21:22:14Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-search-from-raw-logs-quot-I-want-to-extract-a/m-p/532242#M36204 <P>How to create a search from raw logs " I want to extract a srtring in the format " severity" = "40." from raw logs</P> Mon, 07 Dec 2020 21:13:04 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-search-from-raw-logs-quot-I-want-to-extract-a/m-p/532242#M36204 rajneeshdba 2020-12-07T21:13:04Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-search-from-raw-logs-quot-I-want-to-extract-a/m-p/532245#M36205 <P>There's a reason why the Body field is so much bigger than the Subject field in postings and that's so we can put a lot more information into the body to help explain the problem we want to solve.</P><P>Are you looking for "severity=40" or "I want to extract a string in the format "severity" = "40"" or other variant?</P><P>Have you tried typing the string you want to find into the search bar?</P> Mon, 07 Dec 2020 21:22:14 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-search-from-raw-logs-quot-I-want-to-extract-a/m-p/532245#M36205 richgalloway 2020-12-07T21:22:14Z