a rich man’s fieldsummary
The Splunk command fieldsummary is amazing – I use it quite frequently to explore more “new” (to me) sourcetypes, and to find out about more fields than I’ve previously used in the sourcetypes I work with most. But sometimes you want to be able to delineate more granularly than fieldsummary will allow. Maybe you have…