I have an event log that looks like this
search_name=x, search_now=3.000, info_min_time=1692741600.000, info_max_time=1692828000.000, info_search_time=1692847620.636, app=Digital,
text="<a href=\"https://support.vodafone.co.uk/1627646512 \" target=\"_blank\"> ...etc ", info_log=l use the command ... | table text to extract the 'text' field, you get the expected result <a href=\"https://support.vodafone.co.uk/1627646512 \" target=\"_blank\"> ...etc However, when I attempt to extract the same 'text' field from the same event, but this time from a summary index, I get a different result <a href=\ and the whole value is presented in the event tap when i enable the verbose mode so the whole value is in the summary index but i can't show it. how to prevent splunk from truncating the result if it is in the summary index
... View more