Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to you create a table with each row being a log and every column being a recognized "Interesting Field"?

$
0
0
I was wondering if there is an easy way to create a table that contains every single recognized interesting field instead of doing the usual `| table field1, field2...` method. To be clear I want to have each row in the table as a separate instance/log and not a summary of counts. In other words, I would like a substitution for `| table` but to capture every single interesting field that is recognized. Thanks! i am looking for a shortcut that will basically do something like this: field1 . field2 .... field100 log A: string1. string2 . string100 logB: string21 . string22. string200 i know you can do it manually by performing the command `| table field1, field2... field100` but typing out every field i want to capture is extremely time consuming so i am wondering if there is a shortcut to do it

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>