Splunk Search

(makecontinuous 2D x=0-9 y=0-9) Are there any built-in commands to support this?

hylam
Contributor

One way is to loop thru 0-99 and mod. Are there any built-in command to support this?

EDIT1
use case: I want to fill the missing cells
| makeresults count=100 | streamstats current=f count | eval row=floor(count/10) | eval col=count%10 | chart sum(count) by row col

alt text

Tags (1)
0 Karma

woodcock
Esteemed Legend

I do not at all understand what you are asking however it appears to me that you have a solution that works, but is too cumbersome for your taste. In such cases, I create a macro to abstract away the complications and let users see "a built-in command" instead of a long string of SPL:

http://docs.splunk.com/Documentation/Splunk/6.2.0/Search/Usesearchmacros

0 Karma

Richfez
SplunkTrust
SplunkTrust

It could be helpful to have a use case for this or some objective you are trying to achieve. Someone may have an answer anyway, but I think if they don't then getting some idea of what use such a thing may be put to may get more answers.

Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...