Wondering if we can do something like this:
... | table * | sort by <1>
Where <1> refers to the first field in the table as the field names are dynamic and subject to change.
...ike to do is assign a specific sourcetype to each Mid-Tier and then use a lookup table to get the sourcetype by searching for the specific Mid-Tier. Then pass the sourcetype to a search so that data r...
I am building a table query to list down tickets against applications. Where tickets are stored in sourcetype 'a' and application names are stored in sourcetype 'b' with a common ID field
When t...
...ystem codes after.
Possible Solutions
Is there a way I can organize the data to have the X row become the first row in the table?
Or in the drop-down code, am I able to reference the second r...
I have a dbx query plus SPL commands that makes me a certain table, which I want to refer to via a table name, is it possible?
The present table needs some new columns and that's what t...
Hi - I am currently working on adding a tooltip to a column header on a table in a Splunk dashboard. I have seen ways of adding tooltips to the cell (here) but that's a little more than what I want....
HI,
I have this table with one column and 3 rows (could be more as this is a search result) and ther could be also more entries in a data set
date_minute:34,host:h_a,index:prod date_minute:39,h...