Dashboards & Visualizations

How to create a below table?

Path Finder

I Have a table which is a result of below mentioned query. It displays the different parameter values over different servers.

Parameter Server1 Server2 Server3 Server4 Server5 ....

index=auto_prod_cm_comparisions sourcetype=auto_prod_details_log source="/logs/web/output/smartauction2.0/_host_details.log" ":" "architecture" OR "cpu" OR "CPU(s)" NOT crtime NOT cstates_count NOT cstates
NOT snaptime NOT pstates_nsec NOT _ID NOT *_id earliest=-48h |rex field=_raw "(?:[^:\n]:){3}(?.)\s(?.)" |rex field=source "(\d+_){2}(?.\w\d)_" | search Server_Name ="*wb"
|chart limit=0 values(abc) over Parameter1 by Server_Name

How to create a table which adds one more column to above table and display Message as "same" if value of a Parameter is same for each server and display Message as "not same" if for any server we have a different value for that particular parameter.


Parameter Message Server1 Server2 Serevr3 .....

can someone help me update the above query to get the desired result. the view should be same , just need to add one cloumn i.e. "Message" which will display message "same" and "not same" based on comparing a particular parameter values of different servers.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...