topic Re: echo command in splunk in Splunk Search

echo command in splunk

neeldesai1992 — Wed, 11 Oct 2017 13:51:52 GMT

How can I print out any value or any result in splunk? Does splunk have any echo command system? eval didn't help me much.

Re: echo command in splunk

s2_splunk — Wed, 11 Oct 2017 16:48:47 GMT

What do you mean by 'print out'? You can always display field values by doing something like this index=xyz sourcetype=abc | table fieldA fieldB fieldC
But I am not sure I understand your question.

Re: echo command in splunk

gcusello — Wed, 11 Oct 2017 16:50:50 GMT

Hi neeldesai1992,
You can print out any result using the table command:
you can list the full _raw log ( | table _time _raw ) or selected fields ( | table _time field1 field2 fieldn ).

eval is a command to elaborate field values.

Bye.
Giuseppe

Re: echo command in splunk

niketn — Wed, 11 Oct 2017 17:30:38 GMT

@neeldesai1992, if you are starting with Splunk, you should go through basic Splunk tutorials on Splunk Education site : https://www.splunk.com/view/education-videos/SP-CAAAGB6

Also Splunk Fundamentals 1 Free Splunk course: https://www.splunk.com/view/SP-CAAAPX9
Or Using Splunk Free Course: https://www.splunk.com/view/SP-CAAAHSM

You should also try out Splunk Search Tutorial Step By Step Documentation on Splunk Docs.
http://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial

Re: echo command in splunk

pallivikas — Wed, 12 Aug 2020 20:33:26 GMT

If you are looking to print out multiple static values under different columns in the output, use the below query:

| stats count | eval Name="my name", Nickname="anything", Text="This is my custom text" | fields - count

Result looks like this:

This can be of use when u want to display the text not available in the fields. Hope this helps.