SPL: Longest common substring

[jroedel]

Hello everyone,

I am looking for a SPL-solution to determine how long the longest common substring of two strings is.

Is there any built-in way to do that? Or is there any app that provides me with some command for that?

Thanks in Advance!

[PickleRick]

No, there is no built-in command to find that.

You could try to implement it in SPL and that could be an interesting exercise in itself but it would most probably _not_ be a very effective solution.

If you really need that you should probably implement it as an external command using python.

[psherman42]

You probably need to use external scripting such as python to solve your algo processing needs as it falls outside simple text pattern matching. By design Splunk itself is more designed for data retrieval, aggregation and general text operations which I would consider the typical use case of Splunk. 

[richgalloway]

I think you'll need an external command to do that.