Splunk Search

I want to write ".......some text Unable to reach on port some text ...." using a splunk query

Explorer

I want to write ".......some text Unable to reach on port <1234> some text ...." using a splunk query , how will I be doing this .

Tags (2)
0 Karma

Motivator

Hello

First you should create the query to get the servername and port data, like:

... | stats count by servername, port 

And then make eval to concatenate text with servername and port like:

...| eval message = ".......some text Unable to reach " .servername. " on port " .port. " some text..."

Regards

0 Karma