Dashboards & Visualizations

How to create a below table?

abhi04
Communicator

I Have a table which is a result of below mentioned query. It displays the different parameter values over different servers.

e.g.
Parameter Server1 Server2 Server3 Server4 Server5 ....

index=auto_prod_cm_comparisions sourcetype=auto_prod_details_log source="/logs/web/output/smartauction2.0/_host_details.log" ":" "architecture" OR "cpu" OR "CPU(s)" NOT crtime NOT cstates_count NOT cstates
NOT snaptime NOT pstates_nsec NOT _ID NOT *_id earliest=-48h |rex field=_raw "(?:[^:\n]:){3}(?.)\s(?.)" |rex field=source "(\d+_){2}(?.\w\d)_" | search Server_Name ="*wb"
|chart limit=0 values(abc) over Parameter1 by Server_Name

How to create a table which adds one more column to above table and display Message as "same" if value of a Parameter is same for each server and display Message as "not same" if for any server we have a different value for that particular parameter.

e.g.

Parameter Message Server1 Server2 Serevr3 .....

can someone help me update the above query to get the desired result. the view should be same , just need to add one cloumn i.e. "Message" which will display message "same" and "not same" based on comparing a particular parameter values of different servers.

Tags (1)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...