×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
Manideep
Loves-to-Learn Lots
Member since: ‎09-15-2022
‎09-15-2022
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎09-15-2022
View All

Re: Why am I unable to filter log data from extrac...

by in Splunk Search
‎09-15-2022 08:33 AM
‎09-15-2022 08:33 AM
My query  |  rex field=_raw "(?msi)(?<SiteId>(?<=SiteId:).+?(?<=\n))" | spath input=SiteId with the above query i am able to see the values under "SiteId" fields ... View more

Why am I unable to filter log data from extracted ...

by in Splunk Search
‎09-15-2022 08:19 AM
‎09-15-2022 08:19 AM
scenario : - I had a log file. I am able to extract the fields from the log event and also see the data in the extracted fields. But when I am filtering the data with use of extracted field, unable to see the results although it has data in the extracted field.  I have referred to this "http://blogs.splunk.com/2011/10/07/cannot-search-based-on-an-extracted-field/" link it doesn't help.  Please help us regarding this. ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎09-15-2022 03:28 PM