Splunk Search

How to search specific lines in splunk log file?

saibal6
Path Finder

I have 100 lines content log files where I want to show only between 32-80 lines in searching without regex condition.

Tags (1)
0 Karma
1 Solution

logloganathan
Motivator

Alway using regular expression is good.

else you can try like this
eval myField = replace (_raw, "[\n\r]","|") | makemv delim="|" myField | eval 32thline=mvindex(myField ,32) | eval 32thline=mvindex(myField ,33) | ..| eval 80thline=mvindex(myField ,80)

View solution in original post

logloganathan
Motivator

Alway using regular expression is good.

else you can try like this
eval myField = replace (_raw, "[\n\r]","|") | makemv delim="|" myField | eval 32thline=mvindex(myField ,32) | eval 32thline=mvindex(myField ,33) | ..| eval 80thline=mvindex(myField ,80)

View solution in original post

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!