Splunk Search

Table as results of a search in forms

adityapavan18
Contributor

Hi

I am using following query to get my results in tabular format:

source="/splunkInput/MARTINI/EMLC/*" E2E_ID="sampleid" | transaction E2E_ID, tier | chart avg(duration) by E2E_ID,tier

which gives me results in a tabular format with E2E_ID and also for different tiers.

Now i want to create a form search for which takes E2E_ID as input and gives results in table with values E2E_ID and different tiers.

COuld anyone help me on this..?

Tags (4)
0 Karma
1 Solution

Ayn
Legend

Did you create a search form and encountered problems with this, or do you simply not know how to create search forms and want us to create the whole search form for you?

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...