Splunk Search

Fuzzy Search Not working properly

anchitratnesh
New Member

Hi ,

I am using Splunk 7.2.0 and have used Fuzzy Search for Splunk(https://splunkbase.splunk.com/app/3109/#/details) .
My dashboard has below content.
An input Text box which has a token defined ("$shopdetails$") and use for search purpose.
Then I have column which have details like

ShopId ShopSummary ShopDescription ShopSore
3211 New Product New product for Baby Babyshop
7865 Modify Product Baby Shampoo added BabyShop
6789 Delete Product Product removed from Cart Babyshop
.... .............. ......................... ........

Below are the Fuzzy query I have written
| fuzzy wordlist="$shopdetails$" compare_field="ShopSummary" delims="\s+"
| fuzzy wordlist="$shopdetails$" compare_field="ShopDescription" delims="\s+"

But the Fuzzy Search is returning irrelevant details if the Product is in Uppercase it returns 8% match but if I write product in lower case its 100% match.
Also it shows Baby a matching pattern for Shampoo.
Please help

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...