topic Search for file path and only that file path to come back nothing else in Splunk Search

Search for file path and only that file path to come back nothing else

robertlynch2020 — Tue, 29 Sep 2020 13:36:13 GMT

I have the following files

/net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/
/net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/logs/traces/
/net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/logs/traces/
/net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/XXX/YYY

when i run the below search i get all the directories back, in this case i just want the one /net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/. Not the other 3

| search File_location = */net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/*

Cheers for you help 🙂

Re: Search for file path and only that file path to come back nothing else

jkat54 — Tue, 11 Apr 2017 11:48:46 GMT

Does this work?

 File_location = */net/dell427srv/data1/apps/*

If so, it might be a segmenter "problem"

Re: Search for file path and only that file path to come back nothing else

niketn — Tue, 11 Apr 2017 11:56:48 GMT

@robertlynch2020... If you want exact match, you should be taking out the * asterisk wildcard for pattern matching.

| search File_location = "/net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/"

Re: Search for file path and only that file path to come back nothing else

robertlynch2020 — Tue, 29 Sep 2020 13:36:16 GMT

cheers that worked @niketn 🙂

| search File_location = "/net/dell427srv/data1/apps/QCST_DBS_RSAT_v3.1.38_MASTER_DONOTRESTART/"

Re: Search for file path and only that file path to come back nothing else

niketn — Tue, 11 Apr 2017 12:57:22 GMT

@robertlynch2020... Glad it worked. I have converted my comment to answer. Since you have accepted your own answers, please upvote my answer, since it helped 🙂 Cheers!