- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Alternative to mcatalog values(_value) for Metrics
sandyrite87
Loves-to-Learn
09-07-2020
05:46 PM
Hello,
I'm having trouble finding an alternative to the mcatalog values(_value) command for metrics. In the documentation, it says that the values(_value) is not allowed, so what is another way I can just display all the "_value" that was sent to Splunk? For example, i can do | mcatalog values(region) and display all the regions that a user was sending.
