Splunk Search

Field extraction in tabular format data

splunk_learner
Explorer

Hi ,
I have events in following format
Subject Maths English Science
Marks1 95 98 96
Marks2 9 8 10

I want to extract subject name and marks2 value and display in an tabular format for all the events.
How can this be achieved.
Output table expected is
"Timestamp of event" Maths English Science
25-12-2012 9 8 10

Thank you

Tags (1)
0 Karma
1 Solution

Ayn
Legend
0 Karma

Ayn
Legend
0 Karma

splunk_learner
Explorer

Thanks .This was what i wanted.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...