Splunk Search

Help with search to draw a timechart for dynamic input

mayank101
New Member

I have a checkbox in which user has to enter the hostname manually by himself.
So on the basis of the hostname entered the time chart for that hostname should be drawn automatically.
I am unable to incorporate this feature. Can anyone help in writing the search?
I am particularly new to Splunk.

0 Karma

lakshman239
Influencer

If you capture the value entered in a field, say hostname, you can do something like your search |eval myhost=$hostname$ | timechart count by myhost

You can change based on what you want to plot in the timechart.

0 Karma

mayank101
New Member

Can you please tell me how to capture the hostname,right now I am just able to enter the hostname in checkbox named filterhost.It still shows waiting for the input and no result is getting displayed.

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...