Hi Everyone,
I need to create one variable using Eval my variable name is - JOB_EXEC_TIME how can I create a variable using eval.
And then I need to pass it in below query:
timechart sum(JOB_EXEC_TIME) as TotalExecTime by JOB_NM
Can someone guide me How can I do this in splunk.
Can you please share more details where you want to create variable like (from input or search result) and how you want to use in time chart?
Currently I am passing JOB_EXEC_TIME is my timechart like below:
timechart sum(JOB_EXEC_TIME) as TotalExecTime by JOB_NM
Now I want to pass -JOB_EXEC_TIME(reverse order) in timechart.How can I pass that.
nothing is coming
what is OP?