From log file , i have mixed data some wher i have student data as below
bla bla...
bla blaa..
list of the student as below
student Name Student Course Student ID
mike computers 1
jhon electrical 2
alex civil 3
how can i get above information , i have use mulikv as below
index = myindex "student" | multikv forceheader=4 | table "student Name", "Student Course" "Student ID"
im unable to view the information.
How if i mention as only student
index = myindex "student" | multikv forceheader=4 | table student then i can view.
please let me know how can i view the dat along with field name with space.
↧