Splunk Search

Splunk filter

Hakima
Engager

Hi,

I would like to create an application on splunk that would allow me to display an array of particular events but not all events.
I would like to display events according to other events.
Thank you

Tags (1)
0 Karma
1 Solution

Hakima
Engager

Hi lloydknight ,
I have several variables and I would like to make a table where I could display one or two variables for example without showing the others in my table

Thanks

View solution in original post

0 Karma

Hakima
Engager

Hi lloydknight ,
I have several variables and I would like to make a table where I could display one or two variables for example without showing the others in my table

Thanks

0 Karma

deepashri_123
Motivator

Hey Hakima,

You can filter the events that are not required.You can refer the link below:
http://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Routeandfilterdatad

0 Karma

lloydknight
Builder

Will you kindly provide some sample events for us to better understand and answer your question?

Much appreciated!

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...