Splunk Search

Thread Info

In SQL-speak, "how to specify the columns in SELECT clause"? Normally, Splunk does the equivalent of SELECT *, which ...

by Splunk Employee in

I wrote a search operator that takes actions external to splunk. It has to take an action to 'complete' its operation...

by Splunk Employee in

Because wc -l of the input doesn't match my event count, and I'm trying to troubleshoot.

by Splunk Employee in

Creating table using multiple lookup files and Ind...