Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to search if a string exists in a variable number of columns?

$
0
0
Hi, I have multiple columns (number of columns may vary) and wanted to search a string if it exists in any of the columns. How do I do this using a simple search? Log example: There are three statements Id_1="abc" Id_2="xyz" Id_3="123" Id_4="abcd" Id_5="abc" Id_6="abc" Id_1="abc" Id_2="xyz" Id_3="123" Id_1="abc" Id_2="123" Id_3="123" Id_4="abcd" Id_5="abc" Id_6="abc" Id_7="123" I've used the `table` command like this: `| table Id_*` to get a table of Id's OUTPUT for the above search: Id_1="abc" Id_2="xyz" Id_3="123" Id_4="abcd" Id_5="abc" Id_6="abc" Id_7="xyz" Id_1="abc" Id_2="xyz" Id_3="123" Id_4=null Id_5=null Id_6=null Id_7=null Id_1="abc" Id_2="123" Id_3="123" Id_4="abcd" Id_5="abc" Id_6="abc" Id_7="123" Now I wanted to search/get the records where Id_* is "xyz" . Can you help me with the search? Thanks.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>