Splunk Search

Fuzzy Search Not working properly

anchitratnesh
New Member

Hi ,

I am using Splunk 7.2.0 and have used Fuzzy Search for Splunk(https://splunkbase.splunk.com/app/3109/#/details) .
My dashboard has below content.
An input Text box which has a token defined ("$shopdetails$") and use for search purpose.
Then I have column which have details like

ShopId ShopSummary ShopDescription ShopSore
3211 New Product New product for Baby Babyshop
7865 Modify Product Baby Shampoo added BabyShop
6789 Delete Product Product removed from Cart Babyshop
.... .............. ......................... ........

Below are the Fuzzy query I have written
| fuzzy wordlist="$shopdetails$" compare_field="ShopSummary" delims="\s+"
| fuzzy wordlist="$shopdetails$" compare_field="ShopDescription" delims="\s+"

But the Fuzzy Search is returning irrelevant details if the Product is in Uppercase it returns 8% match but if I write product in lower case its 100% match.
Also it shows Baby a matching pattern for Shampoo.
Please help

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...