...arying-field/m-p/422163 I have relatively similar use case, I have multiple columns, the first column is of _time and the remaining column fields are distinct having numeric data for each timestamp. I n...
I have a simple search with a sort command at the end as follows:
.... some base search | dedup id | table id, name | sort -id
and I'm being presented with the following results:
1876000...
...s an "a".
From what I understand that happens when more then half of the characters aren't numeric.
As you can see there are 12 chars, 9 of which are numeric, so I am not sure why this field is c...
so when I use the predict command my fields become null
index=summary source="summary_events_2"
orig_source=pnr
ms_level=ERROR OR ms_level=error
NOT event=no-event
| timechart span=5m s...
Hi All, I think the subject of my questions says it all... I wanted to add numerical data from 2 multivalue fields, and save it to a new field. Field1 Field2 Field3 4 8 12 8 9...
Hi, As mentioned in the subject, I wanted to perform a simple subtraction operation on individual values/elements within a multivalue field. So for example, I have a MV 23 79 45 2...
I have several fields that are named as integers. IE, 64, 110, 240, etc.
If I try and perform a calculation using eval on the values of these fields.
eval result=round(64/360,1)
U...
I've seen numerous questions out there that touch on this topic but haven't found an answer that actually meets my specific use case. I have data from several sources that report numeric data (s...
...t;\t+) "
I want to check if "TEST#" contains any non-numeric values (TEST# must contain all numericfield so that the child applications work properly. Child applications can't handle non-numeric...
I stumbled on a very strange behavior of stats versus timechart when trying to interpret an extracted numerical field.
The field in question contains "," as 1000 separators, so stats consider it a...