Changing timestamp on summary index

Getting Data In

I am running a Summary Index based on a lookup table. However I want to change the summary index timestamp to "Month/Year" field (see below).

| inputlookup inventory.csv
| stats values(count) as count by Month/Year Month FamilyCod ProductCod

Month/Year field is in following format "%Y/%m". Could someone please advise?

Tghanks

Get Updates on the Splunk Community!

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Join the Conversation