How can I use abstract command

Splunk Search

How can I use abstract command?

My query is

| makeresults

| eval test = " 123456789

123

456"

| abstract maxlines=1

This query shoud be

"test = 123456789" I think..

But whole charecter is shown

Am I wrong understand?..

Get Updates on the Splunk Community!

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...