Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

getting results in verbose mode but not in smart or fast mode

$
0
0
I have indexed file using `INDEXED_EXTRACTION=csv` in props.conf when I search `index=abc field_name=123` I get results in all three modes i.e. fast/smart/verbose mode and all fields are getting extracted as expected but when I try index=abc field_name=123|table field_name I only get results in Verbose mode and fast/smart mode gives no results. Then I tried using fields in search still same issue. index=abc field_name=123|fields *|table field_name This will also give results in Verbose mode and fast/smart mode gives no results. Kindly help on this to resolve issue . Thanks,

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>