In simple terms, distance is the number of characters that differ and ratio is the percentage of characters that differ. So, rocks and docks will have a distance of 1 and ratio of .8.
From Splunker Burch Simon:
"Ever wonder if it’s possible to search things that aren’t an exact match? What if you’re looking for “Google” in your data but still want to find matches for “Gogle” and “Googlle”? Well, you’re in luck because that’s exactly what the Levenshtein command does! Extend your SplunkFu by finding and filtering results based on how close of a match they are. Say goodbye to your binary world of equals and not equals. Say hello to Levenshtein!"
Added all option to get ratio and distance fields at the same time.
Nov. 11, 2014, 10:15 p.m.
6.4, 6.3, 6.2
Nov. 5, 2014, 8:03 p.m.
Splunk's App Certification program uses a specific set of criteria to evaluate the level of quality, usability and security your app offers to its users. In addition, we evaluate the documentation and support you offer to your app's users.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.