topic Re: Data formatting help in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/Data-formatting-help/m-p/522151#M3625 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;: thank you</P><P>the Spword field for a cycle always starts with 0 and end with 8. 0 marks start of the cycle and 8 the end</P><P>there are no line numbers. That is something we added using accum&nbsp;</P> Wed, 30 Sep 2020 05:33:05 GMT johnsasikumar 2020-09-30T05:33:05Z Data formatting help https://community.splunk.com/t5/Splunk-Enterprise/Data-formatting-help/m-p/521981#M3611 <P>Hello all,</P><P>Below is the sample data of one cycle. Similarly there are several cycles</P><P>The data below is from sensor values. Each cycle starts with Spword:0 and ends with SPword 8. How do i group these as cycle1,2,3 based on the SPword field.</P><P>The timedifference for all cycles is not same and also when i use transaction command am not able to name it as cycle 1,2.</P><P>Please could you help</P><P>"_time",FrontFormedHeight,Pot,LVDT,LoadCell,SPWord,LineNumber,cycl<BR />"2020-09-29T14:01:24.000+0000","2.703","67.64","0.198",0,0,1,CycleStart<BR />"2020-09-29T14:01:26.000+0000","2.703","67.63","0.198",0,0,2,CycleStart<BR />"2020-09-29T14:01:29.000+0000","2.703","67.64","0.198",0,0,3,CycleStart<BR />"2020-09-29T14:01:31.000+0000","2.703","67.63","0.195",0,0,4,CycleStart<BR />"2020-09-29T14:01:34.000+0000","2.703","67.64","0.198",0,0,5,CycleStart<BR />"2020-09-29T14:01:36.000+0000",0,"67.64","0.198",0,1,6,<BR />"2020-09-29T14:01:38.000+0000",0,"51.66","0.198",0,,7,<BR />"2020-09-29T14:01:39.000+0000",0,"24.61","1.565",0,2,8,<BR />"2020-09-29T14:01:41.000+0000",0,"24.59","1.59",0,2,9,<BR />"2020-09-29T14:01:43.000+0000",0,"18.3","7.551","1160.9241004669334",,10,<BR />"2020-09-29T14:01:44.000+0000","2.52","67.43","0.195",0,4,11,<BR />"2020-09-29T14:01:46.000+0000","2.52","15.53","1.413",0,5,12,<BR />"2020-09-29T14:01:48.000+0000","2.52","12.1","4.471","472.4265266884365",,13,<BR />"2020-09-29T14:01:51.000+0000","2.52","67.53","0.195",0,7,14,<BR />"2020-09-29T14:01:53.000+0000","2.52","67.59","0.195",0,,15,<BR />"2020-09-29T14:01:56.000+0000","2.52","67.64","0.198",0,8,16,cycleEnd</P><P>&nbsp;</P> Tue, 29 Sep 2020 13:03:08 GMT https://community.splunk.com/t5/Splunk-Enterprise/Data-formatting-help/m-p/521981#M3611 johnsasikumar 2020-09-29T13:03:08Z Re: Data formatting help https://community.splunk.com/t5/Splunk-Enterprise/Data-formatting-help/m-p/522018#M3612 <P>Would it be more accurate to say that a cycle begins with SPWord = 0 and LineNumber = 1, and ends with SPWord = 8?</P><P>Also, can cycles overlap or will it always be</P><P>SPword=0 LineNumber=1<BR /><SPAN>...<BR /></SPAN>SPWord=8<BR />SPWord=0&nbsp;</P> Tue, 29 Sep 2020 14:59:53 GMT https://community.splunk.com/t5/Splunk-Enterprise/Data-formatting-help/m-p/522018#M3612 ITWhisperer 2020-09-29T14:59:53Z Re: Data formatting help https://community.splunk.com/t5/Splunk-Enterprise/Data-formatting-help/m-p/522151#M3625 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp;: thank you</P><P>the Spword field for a cycle always starts with 0 and end with 8. 0 marks start of the cycle and 8 the end</P><P>there are no line numbers. That is something we added using accum&nbsp;</P> Wed, 30 Sep 2020 05:33:05 GMT https://community.splunk.com/t5/Splunk-Enterprise/Data-formatting-help/m-p/522151#M3625 johnsasikumar 2020-09-30T05:33:05Z