Reporting

How to combine multiple uri_paths in a report to show data for the single corresponding application?

SaiKalyani
Engager

Hi All
Suppose i have different uri_paths for single application X
ex : /abc/xyz/, 123/abc/, xyz/wer/*
i want to show a report in which i can say for all of these uri_paths it should show me the data as Application name X

Tags (4)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You could define a tag on that field and store all the valid values for application X under one tag value. Then you can search for tag::uri_path=application_X.
Alternatively, you could define a lookup that maps URIs to applications, add that lookup to your data, and then use that lookup field as your classification.

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...