- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
field extraction
ChhayaV
Communicator
08-05-2013
09:07 PM
hi,
I have a log files which are having columns that are not fixed.
if first log entry has col1,col2,col3 then next entry can have col4,col5 only can i analyze and extract fields from such columns
Thanks and Regards
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

kml_uvce
Builder
08-05-2013
10:45 PM
If you have diffrent searches for diffrent column combination then just extract fields from Splunk UI.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
linu1988
Champion
08-05-2013
09:55 PM
Please provide us with sample logs. Try extracting the logs from Splunk UI, remove the matches which you don't want.
