Splunk Search

splunk functions process list

evinasco
Communicator

Hi Splunkers

i am traying to execute the next search using the function process "list"

search | stats list(FullName) as Interfaz list(puerto) as Puerto list(trafficOut) as trafficOut list(trafficIn) as trafficIn list(capacidad) as "Capacidad Interfaz" list(real) as "Real Interfaz" sum(capacidad) as Capacidad p95(real) as Real by Nodo, SysName

alt text

the problem is with the visualization, "list" uses one only row for grouping by two fields , but, when the values exceeds the size of the column that forces a line break, thus the visualization gets corrupted

does anybody know how fix this?

regards

Tags (1)
0 Karma
1 Solution

evinasco
Communicator

I solved that changing option wrap from true to false in the xml

View solution in original post

0 Karma

evinasco
Communicator

I solved that changing option wrap from true to false in the xml

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...