Splunk Search

Does tstats command work in Hunk?

jwalzerpitt
Influencer

I checked the Hunk documentation and it does not list 'tstats' as a command that's not supported, but when I try and run the following search:

| tstats count WHERE index=fwlogs by _time span=15m

I always get the message that states "No results found. Try expanding the time range", no matter what I set the time picker to (1 day, 7 days, etc).

Does tstats work in Hunk?

Thx

0 Karma
1 Solution

rdagan_splunk
Splunk Employee
Splunk Employee

Yes tstats is supported since Hunk 6.4.
Here is the link to the docs that describes what has to be done: http://docs.splunk.com/Documentation/Splunk/latest/HadoopAnalytics/Datamodelacceleration

View solution in original post

rdagan_splunk
Splunk Employee
Splunk Employee

Yes tstats is supported since Hunk 6.4.
Here is the link to the docs that describes what has to be done: http://docs.splunk.com/Documentation/Splunk/latest/HadoopAnalytics/Datamodelacceleration

jwalzerpitt
Influencer

Thx for the info

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...