<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Taking Count of Response Codes by Endpoints with Endpoints listed as rows and Response Codes listed as columns? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Taking-Count-of-Response-Codes-by-Endpoints-with-Endpoints/m-p/648257#M224318</link>
    <description>&lt;P&gt;This should get you what you want.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;{your base search here}
| chart useother=f limit=0 count by serviceName, responseCode&lt;/LI-CODE&gt;</description>
    <pubDate>Mon, 26 Jun 2023 19:39:56 GMT</pubDate>
    <dc:creator>fredclown</dc:creator>
    <dc:date>2023-06-26T19:39:56Z</dc:date>
    <item>
      <title>Taking Count of Response Codes by Endpoints with Endpoints listed as rows and Response Codes listed as columns?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Taking-Count-of-Response-Codes-by-Endpoints-with-Endpoints/m-p/648150#M224295</link>
      <description>&lt;P&gt;Hello,&lt;BR /&gt;&lt;BR /&gt;I am new to Splunk. Please help me write a query to get count of response by ServcieName(displayed in rows) and by response code. The response code and Service name are dynamic.&lt;BR /&gt;&lt;BR /&gt;eg:&lt;BR /&gt;&lt;BR /&gt;Service&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 201&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 200&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 400&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;401&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 500&amp;nbsp; &amp;nbsp; &amp;nbsp;503&lt;BR /&gt;ServiceA&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;2900&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;1023&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 0&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 12&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 3&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;6&lt;BR /&gt;ServiceB&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;1649&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;677&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; 1&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;3&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;6&lt;/P&gt;</description>
      <pubDate>Mon, 26 Jun 2023 14:50:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Taking-Count-of-Response-Codes-by-Endpoints-with-Endpoints/m-p/648150#M224295</guid>
      <dc:creator>NallaAyee</dc:creator>
      <dc:date>2023-06-26T14:50:06Z</dc:date>
    </item>
    <item>
      <title>Re: Taking Count of Response Codes by Endpoints with Endpoints listed as rows and Response Codes listed as columns?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Taking-Count-of-Response-Codes-by-Endpoints-with-Endpoints/m-p/648257#M224318</link>
      <description>&lt;P&gt;This should get you what you want.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;{your base search here}
| chart useother=f limit=0 count by serviceName, responseCode&lt;/LI-CODE&gt;</description>
      <pubDate>Mon, 26 Jun 2023 19:39:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Taking-Count-of-Response-Codes-by-Endpoints-with-Endpoints/m-p/648257#M224318</guid>
      <dc:creator>fredclown</dc:creator>
      <dc:date>2023-06-26T19:39:56Z</dc:date>
    </item>
    <item>
      <title>Re: Taking Count of Response Codes by Endpoints with Endpoints listed as rows and Response Codes listed as columns?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Taking-Count-of-Response-Codes-by-Endpoints-with-Endpoints/m-p/648421#M224353</link>
      <description>&lt;P&gt;Did this get you what you were looking for? If so, please mark the solution as accepted.&lt;/P&gt;</description>
      <pubDate>Tue, 27 Jun 2023 18:09:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Taking-Count-of-Response-Codes-by-Endpoints-with-Endpoints/m-p/648421#M224353</guid>
      <dc:creator>fredclown</dc:creator>
      <dc:date>2023-06-27T18:09:56Z</dc:date>
    </item>
  </channel>
</rss>

