How to get the data from splunk

aditsss — Thu, 02 Dec 2021 05:21:38 GMT

Hi Everyone ,

I have two applications and I have created dashboards forteh apps:

index=epaas_epaas2_idx ns=blazegateway app_name=blazecrsgateway*

I need to get the below info:

Total YTD Volume for PSF Push API
Total Volume to GRS YTD

Can someone guide me how we can get the above two information with index,ns and app name.

Re: How to get the data from splunk

gcusello — Thu, 02 Dec 2021 06:57:22 GMT

Hi @aditsss,

could you better describe your request:

YTD is a numeric field to sum?
what's the field to sum to have Total Volume?
what are "PSF Push API" and "GRS YTD", values of a field? what field?

Anyway, if I correctly supposed your fields and if they all are fields, you could run something like this:

index=epaas_epaas2_idx ns=blazegateway app_name=blazecrsgateway* | stats sum(YTD) AS "Total YTD Volume" sum(Volume) AS GRS YTD values(index) AS index values(ns) AS ns values(app_name) AS app_name BY PSF_Push_API

At least I hint to follow the Splunk Search Tutorial (https://docs.splunk.com/Documentation/Splunk/8.2.3/SearchTutorial/WelcometotheSearchTutorial) to be autonomous in your searches.

Ciao.

Giuseppe

topic How to get the data from splunk in Other Usage

How to get the data from splunk

Re: How to get the data from splunk