Splunk Search

How to generate a search to find errors by type for my error log?

kirankotla
New Member
ERROR - *(somedata).
 FlatFile ERROR - 2649 BUSINESS_LOGIC 
 ERROR - More than 1 primary id found for the given offering  

i wants to find errors type by some data

0 Karma

somesoni2
Revered Legend

Try like this

your base search (e.g. index=foo sourcetype=bar "ERROR") 
| rex "ERROR - (?<Error_Message>.+)" 
| stats count by Error_Message

kirankotla
New Member

Hi
All logs are bellow format ,i wants to chart over unique errors ,and count of each error.
ERROR - More than 1 primary id found for
ERROR - 75785 BUSINESS_LOGIC The number
ERROR - something

0 Karma

somesoni2
Revered Legend

Could you provide more information on your requirement here? You want to just filter the events which has error in formation ERROR - <<errormessage>> ?

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...