Splunk Search

searching for specific errors

jonathanjw
New Member

Possible Duplicate:
searching for specific errors

For starters this app is amazing. I am trying to search a ton of log files for a certain error and its definitely doing its job but i'd like it to grab the very next line after the specified error is found. Is it possible to do so? Thanks, Jonathan

Tags (1)
0 Karma

woodcock
Esteemed Legend

This will do it:

... | streamstats current=f last(_raw) AS prevEvent | <your search here> | fields _raw prevEvent
0 Karma

ftk
Motivator

Duplicate question

0 Karma
Get Updates on the Splunk Community!

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk &#43; Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...

Data Management Digest – January 2026

Welcome to the January 2026 edition of Data Management Digest! Welcome to the January 2026 edition of Data ...