About keyword search

When you perform a keyword search in Splunk, relevant keywords on the event will be highlighted.

However, when you do a search that doesn't include the relevant keyword, it won't be highlighted, so you'll need to find where the keyword is output in the event.

By executing a command called the highlight command, any keyword can be highlighted, making it easier to visually find the location where a specific keyword is output from the event.

About the highlight command

The highlight command can highlight the keyword taken as an argument.

The usage is as follows.

<検索文> | highlight <キーワード>

For example, you can make the keyword "error" stand out by executing a search as follows.

<検索文> | highlight error