I want to run Splunk query from the cmd prompt.
It works just fine with basic error search, but when I tried with rex extraction it doesn't recognize the pipe | and rex commands.
splunk search "index=apps sourcetype=weblogs | rex field=_raw "Source: (?
↧