Splunk Search

SQL Help - pull URL with specific querystrings

alagiriv
New Member

Consider we have the following URLs

http://abc.com/?a=1&b=2&c=3
http://abc.com/?d=1&e=2&a=3
http://abc.com/?f=1&g=2&h=3
http://abc.com/?C=1&b=2&a=3

I need to pull all URLs with the querystring that have a= OR b=

output should be like this:

http://abc.com/?a=1&b=2&c=3
http://abc.com/?d=1&e=2&a=3
http://abc.com/?C=1&b=2&a=3

I'm new to Splunk, your input would be of great help.

Thanks,

Tags (1)
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...