Just run a search with something like this:
index=YourIndexHere | table YourFieldOne YourFieldTwo
But what if my index contains multiple files that have some common fields and i only want to retrieve the data from one file and not all the files?
This is basic stuff.
index=YourIndexHere source=MyOneSourceFileHere | table YourFieldOne YourFieldTwo
Thank you so much for your help. I did the same thing. It was a careless mistake i was trying to wrong fields from the log files.
Again thank u very much.
I have another question.Kindly help on this one also
I have extracted certain feilds using java sdk from splunk with the table command. How can i view that data as a table in my java form.
The data extracted is in the form of job. How can i convert that data into string, so that i can apply conditional operators on that data.
Thanks in advance for your help.
You are better off clicking
Accept on this question and asking a new one. At this point, you and I are probably the only ones listening and you need a broader audience.