How extract the lines as failures from logs using splunk

[Hema_Nithya]

index=os source="/var/log/bitbucket" host=servera* Failed

and evaluate them as failed packages  to install. 

Failed:

python-urllib3.noarch 0:1.10.2-3.el7
python-urllib3.noarch 0:1.10.2-7.el7
php subscription-manager-rhsm-1.24.51-1.el7_9.x86_64
subscription-manager-rhsm-1.24.52-2.el7_9.x86_64
python-syspurpose-1.24.52-2.el7_9.x86_64

[ITWhisperer]

This is a bit vague - what do your events actually look like? what are you trying to achieve? what do your expected results look like?