Hi, I am new to Splunk. How to search error messages in the log file using SPL. I am using the below formats to search for error messages. source="sample_logcat.txt" host="debug" sourcetype="Android log" | head 20 source="sample_logcat.txt" host="debug" sourcetype="Android log" | tail 4 error* AND * | search iwlwifi error* AND * | search Bluetooth Is sub-search possible in Splunk? Can we search the result of a secondary or inner query as the input to the primary or outer question? If possible can anyone explain in detail?
... View more