In simple terms, distance is the number of characters that differ and ratio is the percentage of characters that differ. So, rocks and docks will have a distance of 1 and ratio of .8.
From Splunker Burch Simon:
"Ever wonder if it’s possible to search things that aren’t an exact match? What if you’re looking for “Google” in your data but still want to find matches for “Gogle” and “Googlle”? Well, you’re in luck because that’s exactly what the Levenshtein command does! Extend your SplunkFu by finding and filtering results based on how close of a match they are. Say goodbye to your binary world of equals and not equals. Say hello to Levenshtein!"
Added all option to get ratio and distance fields at the same time.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.