Splunk Search

field extraction

ChhayaV
Communicator

hi,

I have a log files which are having columns that are not fixed.
if first log entry has col1,col2,col3 then next entry can have col4,col5 only can i analyze and extract fields from such columns

Thanks and Regards

Tags (2)
0 Karma

kml_uvce
Builder

If you have diffrent searches for diffrent column combination then just extract fields from Splunk UI.

0 Karma

linu1988
Champion

Please provide us with sample logs. Try extracting the logs from Splunk UI, remove the matches which you don't want.

0 Karma
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...