Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Getting Data In
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- No results in search
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
patilsh
Explorer
06-13-2017
01:35 PM
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
newbie2tech
Communicator
06-13-2017
01:48 PM
your query looks correct, try giving space between |and stats command , also make sure the eventData.farTalk and callid are showing up in the interesting fileds when you look at raw events and that their spelling is correct.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
newbie2tech
Communicator
06-13-2017
01:48 PM
your query looks correct, try giving space between |and stats command , also make sure the eventData.farTalk and callid are showing up in the interesting fileds when you look at raw events and that their spelling is correct.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
MuS
Legend
06-13-2017
01:46 PM
Quick check, do you have the fields eventData.farTalk and callid available? Also check the names of the fields since they are case sensitive.
cheers, MuS
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
patilsh
Explorer
06-13-2017
01:49 PM
Thanks, that helped!!!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
MuS
Legend
06-13-2017
01:51 PM
So did it solve your problem already?
Related Topics
Get Updates on the Splunk Community!
New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...
The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...
Improve Data Pipelines Using Splunk Data Management
Register Now
This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...
3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?
Register
Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...
