https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420145#M172738 <P>Could you create an expanded example of the SPL perhaps using <CODE>| makeresults</CODE> to generate the data for a standalone example?</P> Tue, 05 Mar 2019 16:34:01 GMT msivill_splunk 2019-03-05T16:34:01Z https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420144#M172737 <P>The title says it all. I'm looking for a way to remove fields from searches and subsearches. I know I can hide fields from results with</P> <PRE><CODE>| fields - "fieldName" </CODE></PRE> <P>But I'm looking for a way to get "set diff" to operate on a singe filed. If I was using "diff" without "set" the the attribute parameter could be utilized but unfortunately this option seems to be disabled when the two are used in conjunction.</P> Mon, 04 Mar 2019 01:58:26 GMT https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420144#M172737 kahless1985 2019-03-04T01:58:26Z https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420145#M172738 <P>Could you create an expanded example of the SPL perhaps using <CODE>| makeresults</CODE> to generate the data for a standalone example?</P> Tue, 05 Mar 2019 16:34:01 GMT https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420145#M172738 msivill_splunk 2019-03-05T16:34:01Z https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420146#M172739 <P>What's your current search(es)?</P> Tue, 05 Mar 2019 17:20:12 GMT https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420146#M172739 somesoni2 2019-03-05T17:20:12Z https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420147#M172740 <P>Search in a stats count by type search and then only redirect the interesting fields to a table, the results will only be the fields you send to the table.<BR /> Does that help?</P> Tue, 05 Mar 2019 22:49:21 GMT https://community.splunk.com/t5/Splunk-Search/Remove-fields-from-a-query/m-p/420147#M172740 mydog8it 2019-03-05T22:49:21Z