<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: select rows having similar values in table in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442803#M42451</link>
    <description>&lt;P&gt;Try this!&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;(your search)
|dedup key,Status consecutive=true
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Mon, 18 Mar 2019 06:18:53 GMT</pubDate>
    <dc:creator>HiroshiSatoh</dc:creator>
    <dc:date>2019-03-18T06:18:53Z</dc:date>
    <item>
      <title>select rows having similar values in table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442801#M42449</link>
      <description>&lt;P&gt;Hello Splunkers,&lt;/P&gt;

&lt;P&gt;I need your help to create SPL for below where I am facing issue.&lt;/P&gt;

&lt;P&gt;In table, any status is having more than than one entry with different timings before moving to another status. It is not with every Status. I want to collect record for only one row for any Status (with min Updated column value). &lt;/P&gt;

&lt;P&gt;e.g. status "Ready For Dev" is moved to "In Dev" then "In QA" then "In Dev" then "In QA' then again "Ready For Dev" Status and finally "In Dev" status. In this I want to collect for all the movements.&lt;/P&gt;

&lt;P&gt;Thanks for your help in advance!&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/6707i90742EFD20C6D67F/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 18 Mar 2019 05:11:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442801#M42449</guid>
      <dc:creator>vikas_baranwal</dc:creator>
      <dc:date>2019-03-18T05:11:29Z</dc:date>
    </item>
    <item>
      <title>Re: select rows having similar values in table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442802#M42450</link>
      <description>&lt;P&gt;Hey@vikas_baranwal,&lt;/P&gt;

&lt;P&gt;Are you trying to have each status once instead of repeating multiple times?&lt;BR /&gt;
Can you try using dedup Status?&lt;/P&gt;

&lt;P&gt;Let me know if this helps!!&lt;/P&gt;</description>
      <pubDate>Mon, 18 Mar 2019 05:36:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442802#M42450</guid>
      <dc:creator>deepashri_123</dc:creator>
      <dc:date>2019-03-18T05:36:47Z</dc:date>
    </item>
    <item>
      <title>Re: select rows having similar values in table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442803#M42451</link>
      <description>&lt;P&gt;Try this!&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;(your search)
|dedup key,Status consecutive=true
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 18 Mar 2019 06:18:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442803#M42451</guid>
      <dc:creator>HiroshiSatoh</dc:creator>
      <dc:date>2019-03-18T06:18:53Z</dc:date>
    </item>
    <item>
      <title>Re: select rows having similar values in table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442804#M42452</link>
      <description>&lt;P&gt;Hi @HiroshiSatoh ,&lt;/P&gt;

&lt;P&gt;I am thankful to you as you helped me a lot by providing me exact solution. I feel honored that I am part of such a great a community with high level of knowledge people and all helping hands here.&lt;/P&gt;

&lt;P&gt;Thanks once again!&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 04:31:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442804#M42452</guid>
      <dc:creator>vikas_baranwal</dc:creator>
      <dc:date>2019-03-19T04:31:09Z</dc:date>
    </item>
    <item>
      <title>Re: select rows having similar values in table</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442805#M42453</link>
      <description>&lt;P&gt;Hi @deepashri ,&lt;/P&gt;

&lt;P&gt;Thanks for your reply and help. I was using dedup already but I was missing a command which was advised by @HiroshiSatoh and that worked really well.&lt;/P&gt;

&lt;P&gt;Thanks once again!&lt;/P&gt;</description>
      <pubDate>Tue, 19 Mar 2019 04:33:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/select-rows-having-similar-values-in-table/m-p/442805#M42453</guid>
      <dc:creator>vikas_baranwal</dc:creator>
      <dc:date>2019-03-19T04:33:29Z</dc:date>
    </item>
  </channel>
</rss>

