Splunk Search

How can i do the search in multiple indexes

Contributor

Hi,

How can I do search in multiple index. lets say I have 5 indexes and I want to do the same search in all the five index at one go ..please help me with some fine example

Thanks
Abhay

Tags (3)
1 Solution

SplunkTrust
SplunkTrust

You just specify those indexes on the search line:

keyword=BLAH index=index1 OR index=index2 OR index=index3 | foo by bar

View solution in original post

SplunkTrust
SplunkTrust

You just specify those indexes on the search line:

keyword=BLAH index=index1 OR index=index2 OR index=index3 | foo by bar

View solution in original post