Splunk Search

create a simple table

frankysplunk
Explorer

hi there,

I have a log like this

ip=192.168.20.10, size=458372, url=http://download.microsoft.com

I have a lot of them and I wanna bring them into a table like this

IP | Size in Byte | URL

192.168.20.10 |458372 | http://download.microsoft.com

all requierd fields are already extracted, but I don't now the right syntax for the search box.

I would appriciate any advice,

thank you!

Tags (2)
1 Solution

Ayn
Legend
... | table ip size url

If you want to have "userfriendly" names in the table instead, use rename for that.

View solution in original post

rtadams89
Contributor

So specifically:

your search | rename ip as IP, size as "Size in bytes", url as URL | table IP, "Size in bytes", URL

frankysplunk
Explorer

thank you very much!

0 Karma

Ayn
Legend
... | table ip size url

If you want to have "userfriendly" names in the table instead, use rename for that.

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...