Splunk Search

Compare results to previous results?

ksharma7
Path Finder

If say I have data from December to march in csv every 5 min , and no data from Marc to April.if say in month of nay i got correct data again. Now i want to compare count of success in this hour to sane hour onw, two and three weeks back frim same date but un month of December say how to do ut

Tags (2)
0 Karma

to4kawa
Ultra Champion

sample:

| gentimes start=12/01/20 end=05/01/21
| makecontinuous span=1h starttime
| eval _time=starttime, month=strftime(starttime,"%B") , counts=random() % 100, date=strftime(starttime,"%T")
| bin span=1h _time
| chart sum(counts) by date month
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...