Splunk Search

How can I add a static value into a table row?


I would like to create a dashboard to have some charts for showing statistics of occurrence. The query for plotting the chart is as follows.

| chart count(range) as "Count" by range

But, I would like to include the device with the range = 0. i.e. Which cannot be logged with Splunk but I have the static value that is calculated by Total - Count(range>0), how can I insert this value into the table so that it can be plotted on the chart?

I know that the scenario is little bit hard to understand, to put it briefly , I would like to add a static value as one of the data into the existing table. Is it possible to do that?

0 Karma


hi @kcchu01

if you want row use append or appendpipe

or fi you want add column use appendcols



Thanks a lot for your help , I get it now

0 Karma

Path Finder

You could probably use the append SPL command just prior to the chart command


0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!