Splunk Search
Highlighted

what command will remove status the field from the returned events

New Member

what command is used to remove the status field from the returned events

0 Karma
Highlighted

Re: what command will remove status the field from the returned events

Communicator

| table requiredfield1 requiredfield2 requiredfield3

You can keep required fields by using thid

Highlighted

Re: what command will remove status the field from the returned events

Communicator

One more option

| fields - status

0 Karma
Highlighted

Re: what command will remove status the field from the returned events

Communicator

Working fine?

0 Karma