cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
cesarbmx
Engager
Member since: ‎01-09-2019
‎06-01-2022
Community Statistics
Posts 2
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎01-09-2019
View All

What is the configuration so that the following ev...

by in Splunk Search
‎05-11-2022 08:17 AM
‎05-11-2022 08:17 AM
Could someone help me with the Splunk configuration so that the following events show independently in the Splunk search?     [my_sourcetype] MAX_TIMESTAMP_LOOKAHEAD = 30 SHOULD_LINEMERGE = false LINE_BREAKER = ([\r\n]+) TIME_PREFIX = TIME_FORMAT =         ... View more
Labels

Re: How to format nested data using key-value stru...

by in Getting Data In
‎01-09-2019 03:24 PM
‎01-09-2019 03:24 PM
@adamcohen - what did you end up doing? I am in the same situation as you. If Splunk recommends key value pairs (which I also like above json), why doesn't it recommend a way to represent searchable arrays? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-01-2022 10:35 AM
Karma given to
View All