Splunk Search

create a simple table

frankysplunk
Explorer

hi there,

I have a log like this

ip=192.168.20.10, size=458372, url=http://download.microsoft.com

I have a lot of them and I wanna bring them into a table like this

IP | Size in Byte | URL

192.168.20.10 |458372 | http://download.microsoft.com

all requierd fields are already extracted, but I don't now the right syntax for the search box.

I would appriciate any advice,

thank you!

Tags (2)
1 Solution

Ayn
Legend
... | table ip size url

If you want to have "userfriendly" names in the table instead, use rename for that.

View solution in original post

rtadams89
Contributor

So specifically:

your search | rename ip as IP, size as "Size in bytes", url as URL | table IP, "Size in bytes", URL

frankysplunk
Explorer

thank you very much!

0 Karma

Ayn
Legend
... | table ip size url

If you want to have "userfriendly" names in the table instead, use rename for that.

View solution in original post

.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!