Dashboards & Visualizations

Need to create a dashboard

prabhu7720
New Member

Hi,

I'm able to get the count for NumberFormatException but the NumberFormatException is displayed in separate column. Please verify the screenshot. You will be able to understand.
I need to move the NumberFormatException and its count under Technical error. Could you please help me on this.

alt text

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Replace appendcols with append.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Replace appendcols with append.

---
If this reply helps you, Karma would be appreciated.
0 Karma

prabhu7720
New Member

Hi

The count value is moving to new row, but NumberFormatException is not moving under technical error

Technical_Error count NumberFormatException
CHASE_VALIDATION_FAILURE 1

UNEXPECTED_FAILURE 5

62

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Here's a slightly ugly workaround.

... | append [ ... | stats count | eval Technical_Error = "NumberFormatException" ]
---
If this reply helps you, Karma would be appreciated.
0 Karma

prabhu7720
New Member

it works.

Thank you 🙂

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Please provide a mock-up of the expected output.

---
If this reply helps you, Karma would be appreciated.
0 Karma

prabhu7720
New Member

The expected output should be as below.

Technical_Error count
CHASE_VALIDATION_FAILURE 1
UNEXPECTED_FAILURE 5
NumberFormatException 62

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...