How to make a table using Server Status?

[beepbop]

Hello everyone, I have a csv file which shows me the power status of the server i.e if the server is powered on or off. I want to make a table with powered on as individual row and powered off as another individual row and show the total no of powered on servers and powered off servers as count

[beepbop]

Thankyou!

[gcusello]

Hi @beepbop ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

[gcusello · Accepted solution]

Hi @beepbop,

the search is very simple, something like this:

supponing the you indexed the csv file in an index and you have a field called status:

index=your_index
| stats count by status

I hint to follow the Splunk Search Tutorial at https://docs.splunk.com/Documentation/Splunk/latest/SearchTutorial/WelcometotheSearchTutorial or some video in the YouTube Splunk Channel to understand hot to create searches.

Ciao.

Giuseppe