topic Re: Getting field and value count in the same format in Splunk Dev

Getting field and value count in the same format

Atchyuth_P — Sun, 26 Sep 2021 02:51:29 GMT

Hi,

I have two values in a field named (Online Booking) and want to display the same in tabular format and I tried eval, stats command but not giving the expected result.

Question : Total count to find out the option to book table

and the output that i am expecting is

Please let me know which command needs to be used and also reference books for learning development, I am completely new to Splunk

Re: Getting field and value count in the same format

ITWhisperer — Sun, 26 Sep 2021 09:19:50 GMT

For SimpleXML dashboards, add a format block to the table with the useThousandSeparators option

https://docs.splunk.com/Documentation/Splunk/8.2.2/Viz/TableFormatsXML

Re: Getting field and value count in the same format

Atchyuth_P — Sun, 26 Sep 2021 11:34:18 GMT

Thank you @ITWhisperer for suggesting the method of using XML .

I have tried with the command (chart count by "Online Booking") gives me the accurate search result and also tried with XML and my dashboard looks quite good.