<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: help on under label token in Splunk Dev</title>
    <link>https://community.splunk.com/t5/Splunk-Dev/help-on-under-label-token/m-p/693488#M11600</link>
    <description>&lt;P&gt;The underlabel option does not perform evaluations.&amp;nbsp; Do the eval in a separate statement.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt; &amp;lt;search&amp;gt;
&amp;lt;query&amp;gt;index=* EventCode=25753 
| stats count(EventCode) as toto 
| append 
    [| search index=* EventCode=* 
    | stats count(EventCode) as toto2]&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-7d@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
            &amp;lt;done&amp;gt;
             &amp;lt;condition&amp;gt;
               &amp;lt;set token="NbHost"&amp;gt;$result.toto$&amp;lt;/set&amp;gt;
               &amp;lt;set token="NbHost2"&amp;gt;$result.toto2$&amp;lt;/set&amp;gt;
               &amp;lt;eval token="ratio"&amp;gt;$NbHost$ / $NbHost2$&amp;lt;/eval&amp;gt;
             &amp;lt;/condition&amp;gt;
           &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="underLabel"&amp;gt;$ratio$&amp;lt;/option&amp;gt;&lt;/LI-CODE&gt;</description>
    <pubDate>Tue, 16 Jul 2024 13:14:12 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2024-07-16T13:14:12Z</dc:date>
    <item>
      <title>help on under label token</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/help-on-under-label-token/m-p/693454#M11597</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt; &amp;lt;search&amp;gt;
&amp;lt;query&amp;gt;index=* EventCode=25753 
| stats count(EventCode) as toto 
| append 
    [| search index=* EventCode=* 
    | stats count(EventCode) as toto2]&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-7d@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
            &amp;lt;done&amp;gt;
             &amp;lt;condition&amp;gt;
               &amp;lt;set token="NbHost"&amp;gt;$result.toto$&amp;lt;/set&amp;gt;
               &amp;lt;set token="NbHost2"&amp;gt;$result.toto2$&amp;lt;/set&amp;gt;
             &amp;lt;/condition&amp;gt;
           &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="underLabel"&amp;gt;$NbHost$ / $NbHost2$&amp;lt;/option&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I dont succeed to display the NbHost2 value under my single panel&lt;/P&gt;&lt;P&gt;what is wrong please?&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jip31_0-1721121339609.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/31781iD23E6E70CC7B146C/image-size/medium?v=v2&amp;amp;px=400" role="button" title="jip31_0-1721121339609.png" alt="jip31_0-1721121339609.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 16 Jul 2024 09:16:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/help-on-under-label-token/m-p/693454#M11597</guid>
      <dc:creator>jip31</dc:creator>
      <dc:date>2024-07-16T09:16:27Z</dc:date>
    </item>
    <item>
      <title>Re: help on under label token</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/help-on-under-label-token/m-p/693488#M11600</link>
      <description>&lt;P&gt;The underlabel option does not perform evaluations.&amp;nbsp; Do the eval in a separate statement.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt; &amp;lt;search&amp;gt;
&amp;lt;query&amp;gt;index=* EventCode=25753 
| stats count(EventCode) as toto 
| append 
    [| search index=* EventCode=* 
    | stats count(EventCode) as toto2]&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-7d@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
            &amp;lt;done&amp;gt;
             &amp;lt;condition&amp;gt;
               &amp;lt;set token="NbHost"&amp;gt;$result.toto$&amp;lt;/set&amp;gt;
               &amp;lt;set token="NbHost2"&amp;gt;$result.toto2$&amp;lt;/set&amp;gt;
               &amp;lt;eval token="ratio"&amp;gt;$NbHost$ / $NbHost2$&amp;lt;/eval&amp;gt;
             &amp;lt;/condition&amp;gt;
           &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="underLabel"&amp;gt;$ratio$&amp;lt;/option&amp;gt;&lt;/LI-CODE&gt;</description>
      <pubDate>Tue, 16 Jul 2024 13:14:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/help-on-under-label-token/m-p/693488#M11600</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-07-16T13:14:12Z</dc:date>
    </item>
    <item>
      <title>Re: help on under label token</title>
      <link>https://community.splunk.com/t5/Splunk-Dev/help-on-under-label-token/m-p/693509#M11601</link>
      <description>&lt;P&gt;i have anything displayed under label...&lt;/P&gt;&lt;P&gt;is anybody can help?&lt;/P&gt;&lt;P&gt;Here is what i see&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jip31_0-1721311408427.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/31818i4053B136B5A4CBB8/image-size/medium?v=v2&amp;amp;px=400" role="button" title="jip31_0-1721311408427.png" alt="jip31_0-1721311408427.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 18 Jul 2024 14:03:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Dev/help-on-under-label-token/m-p/693509#M11601</guid>
      <dc:creator>jip31</dc:creator>
      <dc:date>2024-07-18T14:03:53Z</dc:date>
    </item>
  </channel>
</rss>

