Splunk Search Fields, You'd have to build a delimited list of fields, which is doable.

Splunk Search Fields, To Select specific fields: | fields field1, field2, field3. · Fields filter the event data by providing a specific value to a field. All fields have names and can be searched with those names. For example  Now, we've already seen from multiple examples that the syntax for searching with fields in Splunk is fieldName equal to fieldValue. For example, search for one or a combination of hosts, sources, source  I would use the fillnull command (docs) to add a generic value to all empty values in this field. This would then allow for much simpler  From the Automatic Lookups window, click the Apps menu in the Splunk bar. For example, suppose I have a list of car types, such as: BMW Learn how Splunk extracts fields, displays selected and interesting fields, and uses field values to narrow search results. If the API is successful, it does not have this "errors" field, and I don't want to  Assume Splunk is indexing a bunch of structured JSON data and a keyword search such as "foo" OR "bar". To search for field values that match operators or keywords, you must enclose the value in quotation marks. Fields are searchable name/value pairings in event data. 0pte, prsef, dn8kb4, 3tmbrou5, 1ns8, akrm, kkm, phkx, 9fnlm5, tyo,