All Apps and Add-ons

How do I search for tweets containing specific words?

Path Finder

Hi I am new to Splunk and have recently installed the 'App for twitter data' and set it up with my twitter account.
I want to do an analysis of the data obtained

Say i want to search for tweets containing "Game of Thrones" and "GOT" either in the hashtag or anywhere in the tweet, how should I write the search query ?

I tried this

index=twitter | rename entities.hashtags{}.text as hashtags | fields hashtags | mvexpand hashtags | search hashtags=GameOf* OR hashtags= GOT | stats count by hashtags

in Verbose mode , but of a million events only about 109 events were matched.

Can somebody guide me about how I can modify the search , or point me to proper resources?

0 Karma


You've got the right idea. You're already searching against the hashtag. You just need to search against the tweet text.

  • Use an additional rename to get the tweet text.
  • Have a single search command like (hashtags=GameOf* OR hashtags=GOT OR tweet=GOT).
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...