Splunk Search

Fuzzy Search Not working properly

anchitratnesh
New Member

Hi ,

I am using Splunk 7.2.0 and have used Fuzzy Search for Splunk(https://splunkbase.splunk.com/app/3109/#/details) .
My dashboard has below content.
An input Text box which has a token defined ("$shopdetails$") and use for search purpose.
Then I have column which have details like

ShopId ShopSummary ShopDescription ShopSore
3211 New Product New product for Baby Babyshop
7865 Modify Product Baby Shampoo added BabyShop
6789 Delete Product Product removed from Cart Babyshop
.... .............. ......................... ........

Below are the Fuzzy query I have written
| fuzzy wordlist="$shopdetails$" compare_field="ShopSummary" delims="\s+"
| fuzzy wordlist="$shopdetails$" compare_field="ShopDescription" delims="\s+"

But the Fuzzy Search is returning irrelevant details if the Product is in Uppercase it returns 8% match but if I write product in lower case its 100% match.
Also it shows Baby a matching pattern for Shampoo.
Please help

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...