Hi All, Is there any way to display the date in visualization by using timewrap.
Ex:
22/09/10,22/09/09,22/09/08..etc.-->Expecting
1day ago, 2days ago, 3days ago ---> A...
It appears that using now() inside of the map command will always return the time that the map was started rather than the time for each loop. The below SPL shows an example of this. Does anyone h...
Hi All... For those who already know some SQL, the join commands are pretty easy. Some of my teammates who are non-sql members, they were not aware of join, and when they try to read docs, they c...
I noticed that timewrap came up as suggested SPL command in a Splunk 6.5 search box (see attachment). The command does seem to work. I do not have the timewrap app installed on this system.
I...
I have this query that uses the timewrapcommand that I want to insert a subsearch instead of a 'fixed' value ( 193 ) .
I can't get the subsearch to work to insert the hostcount value inplace o...
...ble to use some of these functions/commands. I tried to Google to find simpler examples but did not come up with anything. Can someone please provide the most simple example possible of using the c...
I am trying to test timewrap and have created the following simple search:
index=_internal source=*metrics.log group="per_index_thruput" | timechart count span=1h | timewrap d
But all I get f...