Splunk Search

How to make a table using Server Status?

beepbop
Explorer

Hello everyone, I have a csv file which shows me the power status of the server i.e if the server is powered on or off. I want to make a table with powered on as individual row and powered off as another individual row and show the total no of powered on servers and powered off servers as count

Labels (3)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @beepbop,

the search is very simple, something like this:

supponing the you indexed the csv file in an index and you have a field called status:

index=your_index
| stats count by status

I hint to follow the Splunk Search Tutorial at https://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial or some video in the YouTube Splunk Channel to understand hot to create searches.

Ciao.

Giuseppe

 

View solution in original post

0 Karma

beepbop
Explorer

Thankyou!

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @beepbop ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated :winking_face:

gcusello
SplunkTrust
SplunkTrust

Hi @beepbop,

the search is very simple, something like this:

supponing the you indexed the csv file in an index and you have a field called status:

index=your_index
| stats count by status

I hint to follow the Splunk Search Tutorial at https://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial or some video in the YouTube Splunk Channel to understand hot to create searches.

Ciao.

Giuseppe

 

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...