https://community.splunk.com/t5/Splunk-Search/Splunk-7-Win2012r2-Retrieve-Tag-s-Value-based-on-another-Tag-s/m-p/373533#M109847 <P>Hello,<BR /> I'm new to Splunk. Need some advice, I need to do as follows:<BR /> Pls. see attached, the sample. <BR /> Tag 1 = ProductionState: 0 (for 30 sec), 1 (for 90 secs), then repeat. An event is generated every 1 sec (i.e. TagAlias=ProductionState, Value=&lt;0 or 1&gt;)</P> <P>Tag 2: WireTensionLeft: 0 (for 1 sec), 10 (for 1 sec), …, 100 (for 1 sec), then repeat. An event is generated every 1 sec (i.e. TagAlias=WireTensionLeft, Value=&lt;0,10, ..., 100, 0,...&gt;)</P> <P>Requirement<BR /> 1.Retrieve Tag1 – Value at 10 sec, 20 sec, &amp; 75 sec, when Tag2 – Value = 1</P> <P>Pls. advise. Thanks</P> Fri, 23 Mar 2018 10:23:32 GMT htkwan 2018-03-23T10:23:32Z https://community.splunk.com/t5/Splunk-Search/Splunk-7-Win2012r2-Retrieve-Tag-s-Value-based-on-another-Tag-s/m-p/373533#M109847 <P>Hello,<BR /> I'm new to Splunk. Need some advice, I need to do as follows:<BR /> Pls. see attached, the sample. <BR /> Tag 1 = ProductionState: 0 (for 30 sec), 1 (for 90 secs), then repeat. An event is generated every 1 sec (i.e. TagAlias=ProductionState, Value=&lt;0 or 1&gt;)</P> <P>Tag 2: WireTensionLeft: 0 (for 1 sec), 10 (for 1 sec), …, 100 (for 1 sec), then repeat. An event is generated every 1 sec (i.e. TagAlias=WireTensionLeft, Value=&lt;0,10, ..., 100, 0,...&gt;)</P> <P>Requirement<BR /> 1.Retrieve Tag1 – Value at 10 sec, 20 sec, &amp; 75 sec, when Tag2 – Value = 1</P> <P>Pls. advise. Thanks</P> Fri, 23 Mar 2018 10:23:32 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-7-Win2012r2-Retrieve-Tag-s-Value-based-on-another-Tag-s/m-p/373533#M109847 htkwan 2018-03-23T10:23:32Z