Getting Data In

Another Newbee Question...Searching Indexed Data

Rayj00
New Member

Totally new with Splunk. Have mercy on my soul! 🙂

I am trying to set up Splunk on my laptop as I am awaiting licensing issues to resolve for the Splunk Server we will be using.

I simply want to index and search my laptop (Window 7) event logs with Splunk, sort of a learning task for me. I am seeing about 25,000 event count in my_laptop index. On the search page I don't see any Fields listed. Actually nothing is listed. I did a "search=my_laptop" in the search field which I thought would list everything but I get nothing?

What am I missing?

Thanks,

Ray

Tags (1)
0 Karma

ftk
Motivator

By default the search app searches the main index only. Try the following search:

index=my_laptop

This will search for all events (implied *) in the my_laptop index.

Rayj00
New Member

Thanks for that tip.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...