Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Show certain text in events as BOLD during search time?

$
0
0
Is it possible to show certain text in the events as BOLD after running the query?? I have used rex mode=sed in my search query to replace certain contents in my events , like below: original event: "tag":"aaa/bbb/ccc/ddd" Replaced event: "x":"aaa" "y":"bbb" "z":"ccc" Is there a way to show **x , y** and **z** as **BOLD** while running my query?(during search time) Something similar to highlight command. How can I achieve this in my search? Appreciate your help on this.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>