topic How to make a table using Server Status? in Splunk Search

How to make a table using Server Status?

beepbop — Tue, 19 Jul 2022 14:28:43 GMT

Hello everyone, I have a csv file which shows me the power status of the server i.e if the server is powered on or off. I want to make a table with powered on as individual row and powered off as another individual row and show the total no of powered on servers and powered off servers as count

Re: Server Status

gcusello — Tue, 19 Jul 2022 06:30:38 GMT

Hi @beepbop,

the search is very simple, something like this:

supponing the you indexed the csv file in an index and you have a field called status:

index=your_index | stats count by status

I hint to follow the Splunk Search Tutorial at https://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial or some video in the YouTube Splunk Channel to understand hot to create searches.

Ciao.

Giuseppe

Re: How to make a table using Server Status?

beepbop — Wed, 20 Jul 2022 05:09:17 GMT

Thankyou!

Re: How to make a table using Server Status?

gcusello — Thu, 21 Jul 2022 12:04:11 GMT

Hi @beepbop ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉