Splunk Search

How can i do the search in multiple indexes

abhayneilam
Contributor

Hi,

How can I do search in multiple index. lets say I have 5 indexes and I want to do the same search in all the five index at one go ..please help me with some fine example

Thanks
Abhay

Tags (3)
1 Solution

alacercogitatus
SplunkTrust
SplunkTrust

You just specify those indexes on the search line:

keyword=BLAH index=index1 OR index=index2 OR index=index3 | foo by bar

View solution in original post

alacercogitatus
SplunkTrust
SplunkTrust

You just specify those indexes on the search line:

keyword=BLAH index=index1 OR index=index2 OR index=index3 | foo by bar

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...