I'm trying to usethe map commandand it seems to fail when I try using some functions within the subsearch (specifically: cidrmatch()). This search returns a correctly-populated t...
...econds)
Rather than building a full custom command to do the following:
| duration outputfield=cleanTime seconds
I know thefunction's code are locked and are part of the source code but can I add to it?
Hello the splunk community,
I'm kinda new to splunk, and I'm trying to perform some charting using theevalfunction like as follow:
index=index1 action=action1
| chart c as count by a...
...larity and supportability (the "OR" clause will continue to grow for this event type), I need to avoid the iteration andusethe eventtype.
For reference:
http://www.splunk.com/base/Documentation/l...
...oo"
| eval ruser=replace(user,"\\","\\")
In this case I have this error
Error in 'eval' command: Regex: \ at end of pattern
The same for:
| eval ruser=replace(user,"\","\\")
U...
...rite my queries to tstats, and I think what I tried to do here is in line with the recommendations, i.e. I repeated the same functions in the stats command that I use in tstats andused the same BY c...
Hi,
We are using Splunk version 5.0.4 in our application. In order to bucket our data and display the buckets in proper order, we usethe chart commandandthen take substr of the field. The f...
...loat also failed |inputlookup app_usage.csv | eval Webmail=cast(Webmail, 'float') with error Error in 'eval' command: The 'cast' function is unsupported or undefined. cast should be in the...
...ELPHI_REQUEST.REQUEST.COMMAND ,host,SVC_ID,check
|rename DELPHI_REQUEST.REQUEST.COMMAND as "COMMAND"
I am getting below output where coalesce is not printing the value of field DELPHI_REQUEST.REQUEST.COMMAND i...