Splunk Search

How to calculate percentage based on 4 different searches

rajhemant26
New Member

Hello everyone.

Want to display the output only for the time which crosses 18 months (earliest time)

Tags (1)
0 Karma

DalJeanis
Legend

You should develop this as a base search (that brings back all three months in a single result) and then post-process those results individually to select each months' data into each panel, and then to analyze all the data for your last panel.

niketn
Legend

@rajhemant26 your requirement and details provided are not clear. Can you provide existing data and simple XML code that you have? Please mock/anonymize and sensitive information.

While posting data/code use the Code button on Splunk answers i.e. 101010 or shortcut key Ctrl+K to ensure that special characters do not escape.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...