cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
iamuser
Engager
Member since: ‎06-17-2021
‎06-17-2021
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎06-17-2021
View All

Re: how to make a search for two or more source fi...

by in Splunk Search
‎06-17-2021 11:37 AM
‎06-17-2021 11:37 AM
Thanks. The upper OR works. The other option I used is by using subquery. similar to this: source="D:\\Applications*Test.Log" | where like(source,"%Windows.App%log%Test.log")  or like(source,"%PBS20%log%Test.log")  or like(source,"%DDS%log%Test.log")  | table source, _raw ... View more

how to make a search for two or more source file w...

by in Splunk Search
‎06-17-2021 07:43 AM
‎06-17-2021 07:43 AM
What search criteria should I include to only get these logs? D:\Applications\Windows.App.0001\app1\logs\log-06-17-2021-Test.log D:\Applications\Windows.App.0002\app1\logs\log-06-17-2021-Test.log D:\Applications\Windows.App.0003\app1\logs\log-06-172021-Test.log D:\Applications\PBS20.01\app1\logs\log-06-17-2021-Test.log D:\Applications\PBS20.02\app1\logs\log-06-17-2021-Test.log D:\Applications\PBS20.03\app1\logs\log-06-17-2021-Test.log D:\Applications\DDS0\app1\logs\log-06-17-2021-Test.log D:\Applications\DDS1\app1\logs\log-06-17-2021-Test.log I tried this but it did not work source="*Windows.App*log*Test.log" source="*PBS20*log*Test.log" source="*DDS*log*Test.log" or this: source="*Windows.App*log*Test.log" or source="*PBS20*log*Test.log" or source="*DDS*log*Test.log" or this: source="*(Windows.App|PBS20|DDS)*log*Test.log)" I can not use the "Applications " keyword since this is a common folder a crosses all applications we are using. Thanks ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎06-17-2021 03:09 PM