Hey folks, I have a hopefully silly question about the stdev(), sum(), var() etc... functions within the stats command. I have an example below where stats sum() are display then another which d...
I'm attempting to build a status dashboard for my prod server farm, and would like to have colored graphics representing the status of a server based on certain criteria (Percentage remaining free di...
...ombination with any other statisticalfunction, such as median() , avg() , min() , etc. But it just doesn't work on its own. I'm using Splunk 6.2.4. Is this a bug or just something I'm not getting?
...ounting of the events that were unsuccessful. I would like to do this as compactly in terms of the Splunk query. I am thinking of something like running an eval to establish fail or success from the a...
Here's what I have below. I'm trying to do unit conversion and the unit trails in the string (ex. 127 KiB). Any ideas as to why the statement won't work?
eval new_max_rx = if(rx_today = "*KiB", "m...
Hello splunkfans,
i'm kind of running out of ideas and this is my first contact to streamstats. 😕
I am working on a statistic of botnet portscans on my firewalllogs. The goal is based on t...
...hart of values Wrg_Status over the time. My search string looks like:
... | eval testLogic=case(
LIKE(stepName,"additional_sub_%") AND stepStatus="PASS", "ADD_PASS",
LIKE(stepName,"w...