I want to write ".......some text Unable to reach on port some text ...." using a splunk query

tusharsappal — Tue, 17 Sep 2013 11:06:42 GMT

I want to write ".......some text Unable to reach on port <1234> some text ...." using a splunk query , how will I be doing this .

Re: I want to write ".......some text Unable to reach on port some text ...." using a splunk query

gfuente — Tue, 17 Sep 2013 11:53:27 GMT

Hello

First you should create the query to get the servername and port data, like:

... | stats count by servername, port

And then make eval to concatenate text with servername and port like:

...| eval message = ".......some text Unable to reach " .servername. " on port " .port. " some text..."

Regards