Search code examples
splunksplunk-query

search for all fields which have some string in field


How can I get only results for specific fields where field name is like something ?

fx. get all fields which have "status" in their field name. I tried this but It doesnt work: sta* I want also to do later this: sta* OR STA* OR Sta*


Solution

  • The solution for this is using following:

     | fieldsummary  sta* STA* Sta*