- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Chaser
Explorer
11-28-2022
04:04 AM
index="redis" sourcetype="csv" total_commands_processed="*" | timechart span=5m total_commands_processed
In the search command above, I want to display value of field "total_commands_processed", anyone can help
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
11-28-2022
04:08 AM
Try something like this
index="redis" sourcetype="csv" total_commands_processed="*" | timechart span=5m max(total_commands_processed) as total_commands_processed
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ITWhisperer

SplunkTrust
11-28-2022
04:08 AM
Try something like this
index="redis" sourcetype="csv" total_commands_processed="*" | timechart span=5m max(total_commands_processed) as total_commands_processed
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Chaser
Explorer
11-28-2022
04:44 AM
