topic Re: Search for multiple keywords. in Splunk Search

Search for multiple keywords.

ykmohank — Thu, 19 Dec 2013 07:26:29 GMT

Hi,

I want to do a search having multiple strings.

Example: Consider,I am looking for SearchKey1 and SerachKey2

In SQL i will write something like this

Select * from Table_Name where ColumnName like '%SearchKey1%' and ColumnName like '%SerachKey2%'

IN SQL the above query returns me all the rows having both search keys SearchKey1 and SearchKey2 in it.

I want to achieve similiar kind of search in SPLUNK. Please help me with appropriate code.

MuS — Thu, 19 Dec 2013 07:37:48 GMT

Hi ykmohank,

as always docs is your friend, read this guide for SQL users.

cheers, MuS

MuS — Mon, 28 Sep 2020 15:31:07 GMT

but I give you some hint:

source=_Name ColumnName="*SearchKey1*" ColumnName="*SearchKey2*"
or
index=_Name ColumnName="*SearchKey1*" ColumnName="*SearchKey2*"

adminpulse — Thu, 27 Jul 2023 08:40:54 GMT

its not working