topic Re: create custom results in Splunk Search

How to create custom results?

msalghamdi — Mon, 12 Jun 2023 13:20:26 GMT

Dear Splunker,

i need you help in creating custom results to include in a report and output it in a table for statistics, here are the data:

Thanks in advance

Re: create custom results

PickleRick — Sun, 11 Jun 2023 09:44:12 GMT

Just use makeresults to generate a block of text, then use multikv to split it into single rows/cols. If you want to add this to an existing report, use append.

But most probably it wil not make much sense if your report has other columns - it will not be a separate "legend" to the table. For that you'd have to create a dashboard with separate widgets - one for table, one for the legend (here you could probably just use static text)

Re: create custom results

msalghamdi — Sun, 11 Jun 2023 10:52:04 GMT

thanks for the answer, the thing is whenever i create results, the same fields gets overwritten when i create multiple of it, please if you can create a search that would show it in a table id be thankful