Splunk Search

field extraction

ChhayaV
Communicator

hi,

I have a log files which are having columns that are not fixed.
if first log entry has col1,col2,col3 then next entry can have col4,col5 only can i analyze and extract fields from such columns

Thanks and Regards

Tags (2)
0 Karma

kml_uvce
Builder

If you have diffrent searches for diffrent column combination then just extract fields from Splunk UI.

kamal singh bisht
0 Karma

linu1988
Champion

Please provide us with sample logs. Try extracting the logs from Splunk UI, remove the matches which you don't want.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...