#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

how to split the data in Splunk?

logloganathan
Motivator

Please provide some example to split the data in splunk
it just example to learn.
answer to these question will be awarded

Tags (1)
0 Karma
1 Solution

skoelpin
SplunkTrust
SplunkTrust

What exactly do you mean split the data?

Are you referring to breaking the events or splitting something by an entity in the statistics view?

If the latter, you would simply add a by clause like this

index=... sourcetype=...
| stats count by host

View solution in original post

skoelpin
SplunkTrust
SplunkTrust

What exactly do you mean split the data?

Are you referring to breaking the events or splitting something by an entity in the statistics view?

If the latter, you would simply add a by clause like this

index=... sourcetype=...
| stats count by host

logloganathan
Motivator

split the data

Get Updates on the Splunk Community!

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...