Splunk Enterprise

Splunk search

LolabhattuA
Loves-to-Learn

Can some one help me in building a Splunk search with the below mentioned criteria!.

My application contains some fields and one of the field is "Request Number". I want the search query to fetch the records which have "Request Number" as "0".

I have the source name, Host name etc. I'm getting other results also, But no Requet number as 0. Can someone help me out here.

Labels (2)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
index=yourindex
| where 'Request Number' = 0
0 Karma

LolabhattuA
Loves-to-Learn

This isn't returning any results.

0 Karma

SinghK
Builder

Index = * | search "Request Number"=0

0 Karma

SinghK
Builder

Please post some test data to test the query if its not sensitive data.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...