I can't comprehend what 'eventstats' is. I went thru the splunk docs. I wanna use math functions like avg.. etc.. not sure whether to use stats avg or eventstats avg !! An example would be a...
I have used below query to get distinct values:
stats values(gitRepo) AS serviceName BY buildNum
This gives correct values. Problem is I am not getting value for other fields. If I used eventstats...
Hello,
I'm looking to use the eventstats function to count the amount of times the word Error occurs in my event.
Can anyone help as it doesn't appear to work ?
...ll churns. where in above i want only churned. please some one help me out.
sourcetype="Customer_Churn"
| stats sum(Total_Revenue) as rev by PLACEMENT
| eventstats sum(rev) as f...
hello I stats events after 2 eventstats command like this | eventstats sum(netp) as "netp1" by site
| eventstats sum(netp) as "netp2" by site user
| stats last(netp1) as "n...
Hi,
For retriving data from iis logs, I have used various eval statements , eventstats , and stats functions.
When I am using eventstats in my query, I am seeing different results than w...
My long set of SPL starts with the typical filtering on the primary search line. It then uses various eval, foreach, streamstats and eventstats commands to process the data for a big stats a...