How to use Splunk as ELK to make a search engine around a keyword?

[si_infrastructu]

Hi
We use Splunk internally for log consultation. But we have a new need for our web application. We would like to have a word or phrase search functionality to get a list of results that fully match or come close to matching the search. For example, if I search "field="It's raining today", I get events that contain.

It's raining today
It's raining today
Its raining today
today It's raining
...

Can machine learning apps enable this kind of thing? Is there a module or addon to do this kind of thing with Splunk.

Thanks for your help

[diogofgm]

If you don't include a field you can kind of do that using splunk searches 

index=myindex ("It's" OR "Its") raining today

This will find all the variations you listed there.

[si_infrastructu]

Thank you for your help !

Your proposal works but requires knowing potentially all the cases and upgrading the query.
I wanted to know if there was not a method closer to an internet search engine with a proposal of results by priority of correspondence to the initial query.

[jamie00171]

Hi @si_infrastructu 

This might work for you: https://docs.splunk.com/Documentation/SCS/current/SearchReference/ConditionalFunctions#like.28.26lt.... ?

Thanks, 

Jamie

[diogofgm]

Not that I know of.