Splunk Search

I am trying to create a report for displaying number of times, replacement of printer supply unit in 1 year, by calculating when the supply level is zero, by IP. Is there any one to help on this?

sabithanitg
New Member

create a report for displaying number of times, replacement of printer supply unit in 1 year, by calculating when the supply level is zero, and by IP.

Tags (1)
0 Karma
1 Solution

aweitzman
Motivator

Without knowing what your data looks like, this suggestion will make some obvious assumptions about your events:

source=printersupplyunits | stats count(eval(supplylevel=0)) as count by IP

Where printersupplyunits is the source of your events, IP is the IP address of each event, and supplylevel represents the supply level at the time of the event.

View solution in original post

0 Karma

aweitzman
Motivator

Without knowing what your data looks like, this suggestion will make some obvious assumptions about your events:

source=printersupplyunits | stats count(eval(supplylevel=0)) as count by IP

Where printersupplyunits is the source of your events, IP is the IP address of each event, and supplylevel represents the supply level at the time of the event.

0 Karma
Get Updates on the Splunk Community!

Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...

Hey Splunky people! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2408. In this ...

Splunk Classroom Chronicles: Training Tales and Testimonials

Welcome to the "Splunk Classroom Chronicles" series, created to help curious, career-minded learners get ...

Access Tokens Page - New & Improved

Splunk Observability Cloud recently launched an improved design for the access tokens page for better ...