Hi Team,
I have imported the logs and i used search query using multikv. The fields are generated fine, but the table alignment is not looking good.
Please find the search query and the output.
index=test sourcetype=gglogs3 | multikv |table REPSD REPHG RPLXP
I have attached the output. In the output, i want to remove all the empty lines and also "====" as well.
You can specify in your query that there must be a value in a field, that is do not allow blanks to be in your results by using
REPSD=* REPHG=* RPLXP=*
You can eliminate fields with certain values (=) by using:
REPSD=* REPHG=* RPLXP=* AND NOT (REPSD="*=*" OR REPHG="*=*" OR RPLXP="*=*")
Hi senthamilselvanj,
You can try using | search (REPSD=* NOT REPSD="*=*") (REPHG=* NOT REPSD="*=*") RPLXP=*
before your search query