topic Create a table from only certain fixed values in Dashboards & Visualizations

Create a table from only certain fixed values

worldexplorer81 — Sun, 07 Jun 2020 23:25:39 GMT

Hi,

I have a search that returns hundreds of results. Each result contains a field called jobName and another field called server
I need to build a table with 2 columns from a fixed set of JobNames. However, if one of the JobName in my defined list is not found in the search result, I need to return 'Not found'

Table should look like:
JobName server
JobA Server1
JobB Server2
JobE Not found
JobX Server6

Can anyone please help on how to generate the output above?
Thanks

Re: Create a table from only certain fixed values

adonio — Tue, 21 Apr 2020 03:46:47 GMT

can you share a sample of your data?
try and look into the fillnull command
https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Fillnull

... your search ... | fields jobName server | table jobName server | fillnull value="Not found" server

hope it helps

Re: Create a table from only certain fixed values

worldexplorer81 — Tue, 21 Apr 2020 12:35:14 GMT

Thanks! The fillnull function works