Splunk Search

how to display 2 numbers on in the same Single Value panel

bestSplunker
Contributor

I want to show the number of successes and failures in a single value panel. How should I do this?

splunk version: 6.4.3

Like the screenshot below, green is successful, red is failures

index = test  
|eval classification=if(eventtype="a","successful","failures")
|stats count by classification

alt text

Tags (1)
0 Karma

MuS
Legend

Hi bestSplunker,

Have a look at this run everywhere search:

| makeresults count=100 
| eval number=random() 
| streamstats sum(number) AS total 
| eval value=if(number > (total * 0.5), 100, 50) 
| stats count by value `comment("This is creating fake events ...")`
| table count 
| transpose 
| eval display='row 1' ." / ". 'row 2' 
| table display

This will create a single field with the value of 2 / 98 as an example.
I'm unsure if you can do the colouring with green and red.

Hope this helps ...

cheers, MuS

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...