All Apps and Add-ons

How do I search for tweets containing specific words?

m_vivek
Path Finder

Hi I am new to Splunk and have recently installed the 'App for twitter data' and set it up with my twitter account.
I want to do an analysis of the data obtained

Say i want to search for tweets containing "Game of Thrones" and "GOT" either in the hashtag or anywhere in the tweet, how should I write the search query ?

I tried this

index=twitter | rename entities.hashtags{}.text as hashtags | fields hashtags | mvexpand hashtags | search hashtags=GameOf* OR hashtags= GOT | stats count by hashtags

in Verbose mode , but of a million events only about 109 events were matched.

Can somebody guide me about how I can modify the search , or point me to proper resources?
Thanks

0 Karma

davidfstr
Explorer

You've got the right idea. You're already searching against the hashtag. You just need to search against the tweet text.

  • Use an additional rename to get the tweet text.
  • Have a single search command like (hashtags=GameOf* OR hashtags=GOT OR tweet=GOT).
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...