Splunk Search Multiple Indexes
You will need to replace. Websep 25, 2019 · splunk search. Keyword=blah index=index1 or index=index2 or index=index3 | foo by bar For not equal comparisons, you can specify the criteria in several ways. I am trying to create a search to do the following:
Webi have index called index1 which has sourcetype called sourcetype1 and another index called index2 with sourcetype called sourcetype2. Webthe multisearch command is a generating command that runs multiple streaming searches at the same time. Weboct 16, 2012 · you just specify those indexes on the search line: Searching in multiple indexes. You can use the `search` command to search multiple indexes at once. Webto search multiple indexes in splunk, use the `index` and `source` parameters. This command requires at least two subsearches and allows only. Webuse the where command to compare two fields. 1) look in a table. Webfeb 20, 2019 · yes correct, this will search both indexes. Some data is in combination of. Index=myindex | where fielda=fieldb.
Some data is in combination of. Index=myindex | where fielda=fieldb.
