Hi,
is it possible to jump to the next line in the search window, to make the whole search more readable?
Thanks
Heinz
Hi HeinzWaescher,
I think you want something like this
myFancySearch
| eval foo=bar
| table foo
right? If so, simply use shift + enter
in the search field.
hope this helps...
cheers, MuS
Hi HeinzWaescher,
I think you want something like this
myFancySearch
| eval foo=bar
| table foo
right? If so, simply use shift + enter
in the search field.
hope this helps...
cheers, MuS
Hi MuS,
yes thats exactly what i want to achieve.
Thanks a lot!
and anyone knows how to turn this Off?
i mean i want this:-
index="securelogs" NOT 107* | stats count by status clientip action | rename status as StatusCode, clientip as CLIENTIP
and not wrapping. typing a | (pipe) automatically takes me to the next line.
Hi
this have defined on user preferences. Just click on your name top of the screen. Depending of splunk version this is little bit different, but select preferences and under it there is spl and search formatting or something. Deselect auto formating.
r. Ismo
Yes, i think thats the correct wording for what i mean 😉
I would be nice to have an easy possibility to write the search like this:
search... | fields + ...
| stats...
Elaborate on what you mean by jump to the next line? Do you mean line-wrapping?