Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

A Clean "| table *"

$
0
0
Given that my search criteria is this: `index=some_index sourcetype=some_sourcetype`, is there a shortcut to piping the `| table *` command where splunk-created fields are automatically excluded? (Basically wanted to do this: `| fields - _raw, _time, eventtype, host, index, sourcetype, source, linecount, splunk_server, splunk_server_group, timestamp, punct` in the shortest possible way.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>