topic Re: How extract the lines as failures from logs using splunk in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-extract-the-lines-as-failures-from-logs-using-splunk/m-p/667139#M228873 <P>This is a bit vague - what do your events actually look like? what are you trying to achieve? what do your expected results look like?</P> Thu, 02 Nov 2023 10:40:09 GMT ITWhisperer 2023-11-02T10:40:09Z How extract the lines as failures from logs using splunk https://community.splunk.com/t5/Splunk-Search/How-extract-the-lines-as-failures-from-logs-using-splunk/m-p/667132#M228871 <P><SPAN class=""><SPAN class="">index=os source="/var/log/bitbucket" host=servera* Failed<BR /><BR />and evaluate them as failed packages&nbsp; to install.&nbsp;<BR /><BR />Failed</SPAN>:<BR /><BR /></SPAN><SPAN class="">python-urllib3.noarch</SPAN> <SPAN class="">0:1.10.2-3.el7<BR /></SPAN><SPAN class="">python-urllib3.noarch</SPAN> <SPAN class="">0:1.10.2-7.el7</SPAN><BR /><SPAN class="">php</SPAN> <SPAN class="">subscription-manager-rhsm-1.24.51-1.el7_9.x86_64</SPAN><BR /><SPAN class="">subscription-manager-rhsm-1.24.52-2.el7_9.x86_64</SPAN><BR /><SPAN class="">python-syspurpose-1.24.52-2.el7_9.x86_64 </SPAN></P> Thu, 02 Nov 2023 10:26:13 GMT https://community.splunk.com/t5/Splunk-Search/How-extract-the-lines-as-failures-from-logs-using-splunk/m-p/667132#M228871 Hema_Nithya 2023-11-02T10:26:13Z Re: How extract the lines as failures from logs using splunk https://community.splunk.com/t5/Splunk-Search/How-extract-the-lines-as-failures-from-logs-using-splunk/m-p/667139#M228873 <P>This is a bit vague - what do your events actually look like? what are you trying to achieve? what do your expected results look like?</P> Thu, 02 Nov 2023 10:40:09 GMT https://community.splunk.com/t5/Splunk-Search/How-extract-the-lines-as-failures-from-logs-using-splunk/m-p/667139#M228873 ITWhisperer 2023-11-02T10:40:09Z