...ilename
but it seems like I should be using eventstats like
index=logs sourcetype=logs
| eventstats sum(Bytes) as TotalBytes by ip, filename, date_mday, date_month, date_year
| where T...
Hi,
we have 2 configuration files like spg.conf and spg.conf.1162016 and we written perl program to find the difference between these 2 files and perl program is running under cron.
we are s...
...otal. A test search that I'm using to try and figure out where things are getting lost looks like this:
... | table account,usage
|eventstats sum(usage) as total
|eventstats sum(usage) as u...
I tried to add a simple join onto my search but Splunk throws a 400 error
{"messages":[{"type":"FATAL","text":"Missing or malformed messages.conf stanza for S...
I am having trouble extracting individual events from a csv file with the data formatted in the following way.
I have tried to look for similar answers online, but can't see any that meet my requir...
I am trying to work out the 99th percentile of some response times and after seeing discrepancies in a couple of search queries I have narrowed it down to the | Stats and | Eventstats command.
M...
I'm drawing in multiple files that look something like this... and I need to be able to distinguish between data drawn in from one file as compared to another. So I'm looking to bring something from ...
I am monitoring a CSV file and creating a dashboard based on it, the file is modified many times a day, or not for many days at all. The file has not just rows added to it but also removed, plus the...
I have a transaction similar to the below one:
02/06/2018 15:10:30.560 Starting transaction
02/06/2018 15:20:90.150 Message A
02/06/2018 15:21:33.480 Message B
02/06/2018 15:23:57.442 Message B
0...