使用Splunk JS SDK创建搜索请求时出错

Question

对于这个例子:https://github.com/splunk/splunk-sdk-javascript/blob/master/examples/node/helloworld/search_normal.js

当我修改第53行

service.search("search index=_internal | head 3", {}, done);

这个新的查询

"index=comtech_np sourcetype=comtech_cdv_csv ENodeB=* "PSAP Name"=* "Calling Party Number"=* "Call Start Time"=* "Call End Time"=*"

我得到错误。我该如何在node中重写这个查询来执行。

错误:

[SPLUNKD] Unknown search command 'index'.
C:Usersshahrsutests4.js:37
console.log("Job SID: ", job.sid);

当我修改查询:

"ENodeB=* "PSAP Name"=* "Calling Party Number"=* "Call Start Time"=* "Call End Time"=*"

我

[SPLUNKD] Unknown search command 'ENodeB'.
C:Usersshahrsutests4.js:37
console.log("Job SID: ", job.sid);

Answer 1

我们可以尝试在splunk查询前添加搜索词，如下所示

搜索索引=comtech_np sourcetype=comtech_cdv_csv ENodeB=* "PSAP名称"=*"主叫号码"=*"呼叫开始时间"=*"呼叫结束时间"=*">