Splunk Search

Find highest and lowest salary taker employee

SA2
Explorer

Hi i need to find the name employee name who are taking high salary and low salary. please help in this

Field Names:

MonthlySalary

"First Name"

Labels (3)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
| eventstats min(MonthlySalary) as lowSalary, max(MonthlySalary) as highSalary
| where MonthlySalary=lowSalary OR MonthlySalary=highSalary

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
| eventstats min(MonthlySalary) as lowSalary, max(MonthlySalary) as highSalary
| where MonthlySalary=lowSalary OR MonthlySalary=highSalary

SA2
Explorer

its working Thank you

Tags (1)
0 Karma

SA2
Explorer

Getting results for every "First Name" field. Evn Before I tired but it's not work

0 Karma

richgalloway
SplunkTrust
SplunkTrust

What have you tried so far?

... | stats min(MonthlySalary) as lowSalary, max(MonthlySalary) as highSalary by 'First Name'
...
---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...