...trftime(_time,"%Y/%m/%d %H:%M:%S")
| rex "^.+transactType:\s(?P<transactType>(.\w+)+)"
| stats values(Fecha) as Fecha, values(transactType) as transactType by ID
This is Ok, if i want count t...
...ransaction_Details ABC Shopping CDE Rent From my splunk index i am running Stats command like below (Tran from index = Tran_lookup) from count(Tran) as count , Avg( r...
Hi Splunk Team I am having issues while fetching data from 2 stats count fields together. Below is the query: index=test_index | rex "\.(?<TestMQ>.*)\@" | eval Priority_Level=case(P...
...Sourcetype "SFTP upload finished" OR "File sent to MFS" OR "File download sent to user" OR "HTTP upload finished" earliest=-0month@month latest=now | bucket _time span=day | stats count(eval(s...
Hello-
I am attempting to make a table and hopefully be able to integrate it into a dashboard.
Goal is to interrogate on two fields and pull stats accordingly.
FieldA has multiple v...
Hello Splunkers I can use stats count and visualize the output as a single value so its nice and big in that panel in my dashboard. Is there a way to visualize the output from stats(sum) in a s...