Solved: Re: How to plot per_second with eval, will it be c... - Splunk Community

Splunk Search

I'm trying to understand this query:

timechart per_second(eval(errorValue>0))

Does this plot the value of errorValue itself (greater than 0) per second, or the number of events with errorValue (greater than 0) per second?

1 Solution

Solution

It'll give you count of event, per second, where that eval expression is true, so it the later (from your question).

View solution in original post

Solution

It'll give you count of event, per second, where that eval expression is true, so it the later (from your question).

Get Updates on the Splunk Community!

Data Outage Monitoring and Reporting

We’ve all been there, right? Living our best life, working on our Splunk environment, when out of nowhere a ...

Manage Datasets and Connections in Catalog on Splunk Cloud Platform

Set Up Data Where You Use It Catalog already helps teams find and understand data across Splunk indexes, ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...