topic Re: SPL: Longest common substring in Splunk Search

SPL: Longest common substring

jroedel — Fri, 23 Feb 2024 14:59:15 GMT

Hello everyone,

I am looking for a SPL-solution to determine how long the longest common substring of two strings is.

Is there any built-in way to do that? Or is there any app that provides me with some command for that?

Thanks in Advance!

Re: SPL: Longest common substring

richgalloway — Fri, 23 Feb 2024 16:25:15 GMT

I think you'll need an external command to do that.

Re: SPL: Longest common substring

psherman42 — Mon, 26 Feb 2024 15:04:57 GMT

You probably need to use external scripting such as python to solve your algo processing needs as it falls outside simple text pattern matching. By design Splunk itself is more designed for data retrieval, aggregation and general text operations which I would consider the typical use case of Splunk.

Re: SPL: Longest common substring

PickleRick — Tue, 27 Feb 2024 08:57:58 GMT

No, there is no built-in command to find that.

You could try to implement it in SPL and that could be an interesting exercise in itself but it would most probably _not_ be a very effective solution.

If you really need that you should probably implement it as an external command using python.