topic Re: How can I extract specified fields from the log files uploaded in Splunk thru a UI? in Splunk Search

How can I extract specified fields from the log files uploaded in Splunk thru a UI?

tankhanandita — Thu, 21 Jul 2016 23:15:41 GMT

I have created a UI which loads the user selected log file in Splunk. Now I have to extract some fields from that file and display that in a table format. How can I do it?
For the UI, I am using jsp and servlets.

Re: How can I extract specified fields from the log files uploaded in Splunk thru a UI?

woodcock — Fri, 22 Jul 2016 14:00:02 GMT

Just run a search with something like this:

index=YourIndexHere | table YourFieldOne YourFieldTwo

Re: How can I extract specified fields from the log files uploaded in Splunk thru a UI?

tankhanandita — Fri, 22 Jul 2016 15:05:13 GMT

But what if my index contains multiple files that have some common fields and i only want to retrieve the data from one file and not all the files?

Re: How can I extract specified fields from the log files uploaded in Splunk thru a UI?

woodcock — Fri, 22 Jul 2016 15:21:10 GMT

This is basic stuff.

index=YourIndexHere source=MyOneSourceFileHere | table YourFieldOne YourFieldTwo

Re: How can I extract specified fields from the log files uploaded in Splunk thru a UI?

tankhanandita — Fri, 22 Jul 2016 15:44:12 GMT

Thank you so much for your help. I did the same thing. It was a careless mistake i was trying to wrong fields from the log files.
Again thank u very much.

Re: How can I extract specified fields from the log files uploaded in Splunk thru a UI?

tankhanandita — Fri, 22 Jul 2016 16:03:34 GMT

I have another question.Kindly help on this one also
I have extracted certain feilds using java sdk from splunk with the table command. How can i view that data as a table in my java form.
or
The data extracted is in the form of job. How can i convert that data into string, so that i can apply conditional operators on that data.

Thanks in advance for your help.

Re: How can I extract specified fields from the log files uploaded in Splunk thru a UI?

woodcock — Fri, 22 Jul 2016 17:01:20 GMT

You are better off clicking Accept on this question and asking a new one. At this point, you and I are probably the only ones listening and you need a broader audience.