Hi,
I need to search for an element A present in one of the fields let's say field 1.
Some of the values present for field1 in various rows are
Row1: field1=C,D
Row2: field1=E,F,A, ....
I need to do a extract each of the elements present before the comma (,) and compare to see if its A across rows.
Is there a way in Splunk to perform this capability?
Any help in solving this is greatly appreciated.
Cheers,
Dilip
↧