- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

logloganathan
Motivator
03-15-2018
06:58 AM
Please provide some example to split the data in splunk
it just example to learn.
answer to these question will be awarded
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

skoelpin

SplunkTrust
03-15-2018
07:30 AM
What exactly do you mean split the data?
Are you referring to breaking the events or splitting something by an entity in the statistics view?
If the latter, you would simply add a by clause like this
index=... sourcetype=...
| stats count by host
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

skoelpin

SplunkTrust
03-15-2018
07:30 AM
What exactly do you mean split the data?
Are you referring to breaking the events or splitting something by an entity in the statistics view?
If the latter, you would simply add a by clause like this
index=... sourcetype=...
| stats count by host
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

logloganathan
Motivator
03-15-2018
07:36 AM
split the data
