- Splunk Operational Intelligence Cookbook
- Josh Diakun Paul R Johnson Derek Mock
- 47字
- 2025-04-04 16:53:02
Tabulating every field
Often, there are situations where we might want to present every event within the data in tabular format, without having to specify each field one by one. To do this, we simply use a wildcard (*) character as follows:
index=main sourcetype=access_combined | table *