Solved: how to tell if I have multiline events?

Splunk Search

Because wc -l of the input doesn't match my event count, and I'm trying to troubleshoot.

1 Solution

Solution

You can also search: linecount!=1

Solution

You can also search: linecount!=1

* | stats count by linecount

Get Updates on the Splunk Community!

We’ve been shouting it from the rooftops! The findings from the 2023 Splunk Career Impact Report showing that ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...