Splunk Search

Does tstats command work in Hunk?

jwalzerpitt
Influencer

I checked the Hunk documentation and it does not list 'tstats' as a command that's not supported, but when I try and run the following search:

| tstats count WHERE index=fwlogs by _time span=15m

I always get the message that states "No results found. Try expanding the time range", no matter what I set the time picker to (1 day, 7 days, etc).

Does tstats work in Hunk?

Thx

0 Karma
1 Solution

rdagan_splunk
Splunk Employee
Splunk Employee

Yes tstats is supported since Hunk 6.4.
Here is the link to the docs that describes what has to be done: http://docs.splunk.com/Documentation/Splunk/latest/HadoopAnalytics/Datamodelacceleration

View solution in original post

rdagan_splunk
Splunk Employee
Splunk Employee

Yes tstats is supported since Hunk 6.4.
Here is the link to the docs that describes what has to be done: http://docs.splunk.com/Documentation/Splunk/latest/HadoopAnalytics/Datamodelacceleration

jwalzerpitt
Influencer

Thx for the info

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...