cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
marting456
Explorer
Member since: ‎09-01-2020
‎09-07-2020
Community Statistics
Posts 3
Solutions 1
Karma Given 0
Karma Received 0
Member Since ‎09-01-2020
View All

Re: Calculated field in data model is not availabl...

by in Splunk Search
‎09-07-2020 05:51 PM
‎09-07-2020 05:51 PM
The issue here was that even though the calculated field was defined as loggerPackage in the data model, in the search it is available only as the variable in the regex. Since the regex was '(?<name>(.*))\.{1}' in search it is available as 'name' and not 'loggerPackage'. Changing the regex to '(?<loggerPackage>(.*))\.{1}' fixes the issue. ... View more

Re: Calculated field in data model is not availabl...

by in Splunk Search
‎09-01-2020 11:13 PM
‎09-01-2020 11:13 PM
Not sure I understand. Why would a calculated field be available on a generic search? I defined loggerPackage in the data model. The generic search result has only 6 fields.   ... View more

Calculated field in data model is not available in...

by in Splunk Search
‎09-01-2020 09:01 PM
‎09-01-2020 09:01 PM
I created a calculated field in my datamodel, freight_service_error_list_martin, called loggerPackage that is the extraction of the Java package of the logger. When I selected preview I saw this field was populated correctly and it also appears under CALCULATED when I view this datamodel. However the calculated field does not appear when executing a search on this datamodel: "|datamodel freight_service_error_list_martin search" What am I doing wrong? datamodel fields calculated field missing in datamodel search ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎09-07-2020 09:12 PM