Can i split my results in to certain no of individual modules ?

[rakesh_498115]

Hi,

I am using my query something like this...

sourcetype="x" | stats avg(duration) by SERVER

my output is as follows :

SERVER avg(duration)
M1 12
M2 54
M3 67

These Servers information may changed according to the real time logs.i.e they may inrease...

My requirement now is i need to display these results in separate singlevalue modules..

ie M1 one singlevalue moudule showing 12 and so on...

So i wat i need to dynamically generate certain no of single value fields basin on my search command ..or basin on my search results which clearly tell they are three servers for the above mentioned scneraio..

Please help...Can we do it in SPlunk ???

[Kate_Lawrence-G]

I think you would have to create a 3 different searches (or a mabye a master searcj with some post-processes to display results...?) and display these results individually.

The SingleValue module is pretty limited at what it can display:
SingleValue

(extends DispatchingModule) This module waits for the search to complete and then renders a single field from the first row of the results