<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Splunk filter in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318802#M162587</link>
    <description>&lt;P&gt;Will you kindly provide some sample events for us to better understand and answer your question?&lt;/P&gt;

&lt;P&gt;Much appreciated!&lt;/P&gt;</description>
    <pubDate>Mon, 05 Mar 2018 08:43:58 GMT</pubDate>
    <dc:creator>lloydknight</dc:creator>
    <dc:date>2018-03-05T08:43:58Z</dc:date>
    <item>
      <title>Splunk filter</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318801#M162586</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I would like to create an application on splunk that would allow me to display an array of particular events but not all events.&lt;BR /&gt;
I would like to display events according to other events.&lt;BR /&gt;
Thank you&lt;/P&gt;</description>
      <pubDate>Mon, 05 Mar 2018 08:03:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318801#M162586</guid>
      <dc:creator>Hakima</dc:creator>
      <dc:date>2018-03-05T08:03:52Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk filter</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318802#M162587</link>
      <description>&lt;P&gt;Will you kindly provide some sample events for us to better understand and answer your question?&lt;/P&gt;

&lt;P&gt;Much appreciated!&lt;/P&gt;</description>
      <pubDate>Mon, 05 Mar 2018 08:43:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318802#M162587</guid>
      <dc:creator>lloydknight</dc:creator>
      <dc:date>2018-03-05T08:43:58Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk filter</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318803#M162588</link>
      <description>&lt;P&gt;Hi lloydknight ,&lt;BR /&gt;
I have several variables and I would like to make a table where I could display one or two variables for example without showing the others in my table&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Mon, 05 Mar 2018 08:51:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318803#M162588</guid>
      <dc:creator>Hakima</dc:creator>
      <dc:date>2018-03-05T08:51:27Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk filter</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318804#M162589</link>
      <description>&lt;P&gt;Hey Hakima,&lt;/P&gt;

&lt;P&gt;You can filter the events that are not required.You can refer the link below:&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Routeandfilterdatad"&gt;http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Routeandfilterdatad&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 05 Mar 2018 09:08:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Splunk-filter/m-p/318804#M162589</guid>
      <dc:creator>deepashri_123</dc:creator>
      <dc:date>2018-03-05T09:08:37Z</dc:date>
    </item>
  </channel>
</rss>

