Splunk Search

what command will remove status the field from the returned events

scs1960
New Member

what command is used to remove the status field from the returned events

0 Karma

puneethgowda
Communicator

| table requiredfield1 requiredfield2 requiredfield3

You can keep required fields by using thid

puneethgowda
Communicator

One more option

| fields - status

0 Karma

puneethgowda
Communicator

Working fine?

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...