Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
5,000 results
Sorted by:
07-12-2019
06:07 AM
Is there a way to get the top 10 count for a number of groupings eg:
Col1 Col2 Count
G1 SG1 10
G1 SG2 8
G1 SG3 6
G2 SG4 21
G2 SG5 5
G...
07-06-2020
11:54 AM
...ext=a count=10 time7 text=d count=6 The following query will get the Top N results: earliest=time1 latest=time7 index=blabla | stat sum(count) as count by text Result: text | c...
Labels
- Labels:
-
using Splunk Enterprise
11-28-2012
03:19 AM
1 Karma
I want top 10 values for a field based on the timer control.
mysearch | top 10 E_Time
above command return top 10 results based on the events count. is there anyway to return top 10 values a...
- Tags:
- top
Show results in replies (4)
-
Nope, top works with item counts exclusively, so you cannot use it to work with values.
-
this will return latest result. I want top 10 values from a particular field.
-
...ort | head buy my question, is it possible to get top 10 E_Time values [not events] using top command?
-
Use head : ... | head 10 EDIT: head will not necessarily return the latest results. The...
02-21-2021
03:14 AM
hello splunker ! in splunk, i want to print top email sender by the number of attachment, my command is: index=emaileventtype="email-events" action=delivered | top 10 sender by A...
01-08-2016
03:50 AM
...lahblah9
And I want to get the Top 2 websites listing for only Top 2 users per website; hence the following table output is what I'm trying to get:
Website User
abc.com user1
abc.com user2
def.com u...
Show results in replies (4)
-
I would use a subsearch: # Top websites for top 2 users yoursearch [ yoursearch | top limit=2 u...
-
...ysearchstring | top limit=2 website | table website ] | stats count by website,user | sort +w...
-
...ort the results. I wanted the results to be grouped by websites (top websites by count or another f...
-
...able user website |top limit=2 user by website|head 4 It can't be that simple i believe. I s...
10-20-2011
09:07 AM
Hello,
How can i add a colum on the traffic dashboard just like Top client IP's, but then with the Top Usernames?
It may replace one of the other colums, but its not necessary
Is this p...
09-30-2013
05:59 PM
...3 13.85
I tried something like this, but that would be missing something but, as you could?
SEARCH | stats sum(MB) AS SumMB by service | top SumMB otherstr="Others"
Thank y...
11-14-2017
09:49 AM
in the Top 20 Memory-Consuming Searches dashboard in the DMC OR DM OR whatever its called nowadays i am seeing the user splunk-system-user running several searches named "N/A" in the app named S...
01-19-2018
12:04 PM
1 Karma
...ndex="blah3","beta",index)|eval ii=index+" - "+ip|timechart usenull=f count by ii |sort -count
What I'd like to have the time chart do is capture the top 10 ii values from the eval command.
A...
