Splunk Search

how to display 2 numbers on in the same Single Value panel

bestSplunker
Contributor

I want to show the number of successes and failures in a single value panel. How should I do this?

splunk version: 6.4.3

Like the screenshot below, green is successful, red is failures

index = test  
|eval classification=if(eventtype="a","successful","failures")
|stats count by classification

alt text

Tags (1)
0 Karma

MuS
SplunkTrust
SplunkTrust

Hi bestSplunker,

Have a look at this run everywhere search:

| makeresults count=100 
| eval number=random() 
| streamstats sum(number) AS total 
| eval value=if(number > (total * 0.5), 100, 50) 
| stats count by value `comment("This is creating fake events ...")`
| table count 
| transpose 
| eval display='row 1' ." / ". 'row 2' 
| table display

This will create a single field with the value of 2 / 98 as an example.
I'm unsure if you can do the colouring with green and red.

Hope this helps ...

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...