Given that my search criteria is this: `index=some_index sourcetype=some_sourcetype`, is there a shortcut to piping the `| table *` command where splunk-created fields are automatically excluded? (Basically wanted to do this: `| fields - _raw, _time, eventtype, host, index, sourcetype, source, linecount, splunk_server, splunk_server_group, timestamp, punct` in the shortest possible way.
↧