How can I use abstract command

Splunk Search

How can I use abstract command?

My query is

| makeresults

| eval test = " 123456789

123

456"

| abstract maxlines=1

This query shoud be

"test = 123456789" I think..

But whole charecter is shown

Am I wrong understand?..

Get Updates on the Splunk Community!

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...