Splunk Search

need for creating table

labani
Explorer

Do I need to create table to run queries in static data files? I have uploaded the file but unable to run queries as I don't know the field names or attributes in the data.

Tags (1)
0 Karma

arihant16cse
Path Finder

you don't know your field's name then you use .....
| inputlookup "filename.csv"
run the query ....you see your fields with out knowing their names.

0 Karma

motobeats
Path Finder

Try (your search)|fieldsummary

This will show you the available fields to be manipulated.

0 Karma

Ayn
Legend
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...