SPL
Character Count Per Event
Description
Here's an incredibly simple Splunk query to count the number of characters in an event:
5 2
index=* | eval CharCount=len(_raw)
GoSplunk SPL + dashboard repository
SPL
Here's an incredibly simple Splunk query to count the number of characters in an event:
index=* | eval CharCount=len(_raw)
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.