ODTS for splunk

[smolcj]

Hi all,
I am trying to extract certain fields in a log to make it easy to read. i was using and

to produce it in a simple way, then i felt like using ODTS add on to create a simpler doc with very sensitive information from the logs, but whan i am trying to use the command docgen, i am getting the result as no result inspected, i tried with a simple search like index=main sourcetype=mytype | top source |docgen
anyone please help..
thank you

[splunktechie · Accepted solution]

Hello smolcj,
with this command you should find you output document in app_home/results folder (like c:\program files\splunk\etc\apps\odts_splunk\results folder. Document should be named like results_{timestamp}.odt

[smolcj]

Thanks splunktechie..