Knowledge Management
Highlighted

Tag from cli or search?

Path Finder

Is it possible to auto-tag a field from the results of a search from the cli or the search bar? Something like:

"search color=scarlet OR color=crimson | tag tag::color=red"

Tags (1)
0 Karma
Highlighted

Re: Tag from cli or search?

Contributor

Hi,

It's not possible to do it automatically you can do it through the Splunk Web interface:

http://docs.splunk.com/Documentation/Splunk/latest/User/TagAndAliasFieldValues#Howtotagandaliasfieldvalues

Also if you are running 4.3 you can do some dynamic tagging from the event viewer data:

See http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Tagthehostfield

Thanks,

Kate

0 Karma