Minimum capabilities for Splunk mpreview for Splunk users with non-admin like default user, power role and user? Hi Everyone. I'm seeking some wisdom for minimum Splunk capabilities needed for "S...
I have below query to calculate average response times. For some reason some times the value is coming as '0'. i wanted to remove those values from my calculation.
| mstats sum(calc:service.t...
...hen I tried, however, if the data is the same it will only give you a unique not a correct count.
| mpreview index=murex_metrics | stats count
So i...
wanted to reach out for help regarding an issue we have been experiencing on one of our customers. We build an app that exports events from a standalone customer using the Splunk Enterprise ins...
...nd described. However, if I try the same procedure with a metrics index as a remote data set, my search either index=federated:my_metrix_index or |mpreview index=federated:my_metrix_index do n...
...emplate but it is not working as is in my environment. In my Splunk, when I do a mpreview of my index `vault_telemetry` I am getting a result like the below: metric_name:vault.hostname1...
Hi I can't access the recent data in a metric index anymore with mstat command, but i can see it with mpreview commands. This means that data is there, but mstats just won't work on it anymore? I a...