Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do i find out if a field contains part of another field?

$
0
0
Hello community. I'm struggling to find emails that have a word in the subject which also have the word in an attachment. For example: If an email subject was "X.Y:Z" and then also have an attachment of "Z.doc" As you see, I need to find an attachment that begins with the word that is the end of the subject. So if... Subject="card.parrot:bacon" Then the attachment would be... Attachment="bacon.doc" Would such a thing be possible? I hope this makes sense. Thanks for your time.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>