Hi all,
When I use query : mysearch | stats avg(X)
It is supposed that the result is the average value of field X in the time range choosed.
But it is not give the proper result, I check i...
Hello, I am building a splunk app , where I want to have my own custom aggregate function for statscommand. Below is my use case let say.
| makeresults count=10
| eval event_count=r...
...echnology but I would prefer to have all in one.
The number of rows will vary from 1 to however many technologies are in use for a system. eval doesn't support statsfunctions or this would be v...
I want to list about 10 unique values of a certain field in a statscommand. I cannot figure out how to do this. I figured stats values() would work, and it does... but I'm getting hundred of t...
...otal field within the denominator of my eval command. Any suggestions on how to append this? index=ABC sourcetype="ABC" "EVNT=SWIendcall" |stats count by OUTCOME | addtotals row=f col=t...
hello
I triy to add a condition in my eval command
| stats sum(eval(retrans_bytes)) as retrans by site
So I need to do something like this but it doesnt works
&n...
...eed are in the screenshot below:
I was able to use xyseries with below command to generate output with identifier and all the Solution and Applied columns for each status. However now I want a...
@gcusello @woodcock @richgalloway
Why do we need two functions for the same functionality?
'dedup' displays unique values while 'stats values' do the same, is there any difference other than 'stats...