https://community.splunk.com/t5/Splunk-Search/How-to-search-inside-file-contents-of-uploaded-events/m-p/530977#M149992 <P>Thanks Soutamo,</P><P>I had been working with one area of our product where events were coming in in json format and were automatically parsed successfully. In this case I just needed to add additional field extraction which was delimited by _ and identified source code writing file structure which gave me everything I needed in addition with the docs suggested above 100% solved. Appreciate your time! Thx</P> Thu, 26 Nov 2020 09:52:58 GMT Maycockk 2020-11-26T09:52:58Z https://community.splunk.com/t5/Splunk-Search/How-to-search-inside-file-contents-of-uploaded-events/m-p/530262#M149821 <P>Hoping someone can help, reasonably new to Splunk.</P> <P>I have a number of Splunk events that are uploaded small text files. Is there a way I can search inside these uploaded files explicitly? In my case they are transaction files that may be for sales or refunds.&nbsp;</P> <P>So for example I'd like to search though all transaction files for today to get metrics for all sales and refunds.</P> <P>The in advance.</P> Sat, 21 Nov 2020 06:56:38 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-inside-file-contents-of-uploaded-events/m-p/530262#M149821 Maycockk 2020-11-21T06:56:38Z https://community.splunk.com/t5/Splunk-Search/How-to-search-inside-file-contents-of-uploaded-events/m-p/530276#M149826 Maybe this helps you <A href="https://docs.splunk.com/Documentation/Splunk/8.1.0/SearchTutorial/WelcometotheSearchTutorial" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.1.0/SearchTutorial/WelcometotheSearchTutorial</A> Fri, 20 Nov 2020 22:34:45 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-inside-file-contents-of-uploaded-events/m-p/530276#M149826 isoutamo 2020-11-20T22:34:45Z https://community.splunk.com/t5/Splunk-Search/How-to-search-inside-file-contents-of-uploaded-events/m-p/530977#M149992 <P>Thanks Soutamo,</P><P>I had been working with one area of our product where events were coming in in json format and were automatically parsed successfully. In this case I just needed to add additional field extraction which was delimited by _ and identified source code writing file structure which gave me everything I needed in addition with the docs suggested above 100% solved. Appreciate your time! Thx</P> Thu, 26 Nov 2020 09:52:58 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-inside-file-contents-of-uploaded-events/m-p/530977#M149992 Maycockk 2020-11-26T09:52:58Z