Splunk Enterprise

Hi I want to ask " Can I change the number (212),(42) and 181 to the word that I want?

khairilfirza
Explorer

Hi I want to ask if there is anyway for me to change the number to the words.
For example I want to the number 212 is display as maxis.

Tags (1)
1 Solution

datasearchninja
Communicator

Yes you can do this with a case statement, so assuming your graph is currently produced like this, where the numbers are in afield call 'line':

| stats count by line

You could then do this, defaulting back to the number if you haven't set a value:

| eval text=case(line=="181","text_for_181",line=="211","text_for_211",line=="212","maxis",line==42","text_for_42",1==1,line)
| stats count by text

View solution in original post

0 Karma

khairilfirza
Explorer

alt text

datasearchninja
Communicator

Yes you can do this with a case statement, so assuming your graph is currently produced like this, where the numbers are in afield call 'line':

| stats count by line

You could then do this, defaulting back to the number if you haven't set a value:

| eval text=case(line=="181","text_for_181",line=="211","text_for_211",line=="212","maxis",line==42","text_for_42",1==1,line)
| stats count by text
0 Karma

khairilfirza
Explorer

Thanks Colin for a good answer.

Unfortunately I'm so beginner in splunk. Can you show me where I should put your code?

0 Karma

datasearchninja
Communicator

Hi, can you send through the search from the search bar that made the graph in your original post? (If it is in a dashboard, when you mouseover it, you can select the magnifying lens icon to open the underlying search)

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...