Splunk Search

How to generate a search to find errors by type for my error log?

kirankotla
New Member
ERROR - *(somedata).
 FlatFile ERROR - 2649 BUSINESS_LOGIC 
 ERROR - More than 1 primary id found for the given offering  

i wants to find errors type by some data

0 Karma

somesoni2
Revered Legend

Try like this

your base search (e.g. index=foo sourcetype=bar "ERROR") 
| rex "ERROR - (?<Error_Message>.+)" 
| stats count by Error_Message

kirankotla
New Member

Hi
All logs are bellow format ,i wants to chart over unique errors ,and count of each error.
ERROR - More than 1 primary id found for
ERROR - 75785 BUSINESS_LOGIC The number
ERROR - something

0 Karma

somesoni2
Revered Legend

Could you provide more information on your requirement here? You want to just filter the events which has error in formation ERROR - <<errormessage>> ?

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...