Splunk Search

how to check number of lines in each events

praveenbandi
Explorer

number of lines from file is not matching in the count, want to check each events number of lines. ?

0 Karma
1 Solution

vasanthmss
Motivator

i think you are looking for the field linecount

This search will help you to know the event lines base search | table linecount, _raw you can group by the linecount or _raw to explore further.

V

View solution in original post

hsesterhenn
Path Finder

Hi,

there is a field called "linecount" in every event. (You need smart mode or verbose mode).

HTH,

Holger

vasanthmss
Motivator

i think you are looking for the field linecount

This search will help you to know the event lines base search | table linecount, _raw you can group by the linecount or _raw to explore further.

V
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...