Splunk Search

How to find the event count that are not repeated and repeated events in next consecutive quarter over year ?

venkatesh0464
Engager

I used set diff command, it works fine for less rows. But for my search it terminating and limiting the search results. Is there any other ways to do this. Also is there any possibility for parsing the splunk results with Python and plotting the bar graph graph in splunk visualization?

Tags (1)
0 Karma

valiquet
Contributor

| stats count by event

0 Karma

venkatesh0464
Engager

Similar One:
https://www.splunk.com/blog/2016/02/29/monitoring-vulnerability-deltas.html

Here data comparison over quarter. one series value in Q1 is Q1+Q2,Q4-Q2,Q1

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...