Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About tnguyen125
tnguyen125
New Member
Member since:
07-27-2018
06-05-2020
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 07-27-2018 |
Activity Feed
- Posted Re: eval - Error in 'eval' command: The expression is malformed. Expected ). on Monitoring Splunk. 08-07-2018 12:06 PM
- Posted Re: how do I format the table output as below on Dashboards & Visualizations. 07-30-2018 08:19 AM
- Posted Re: how do I format the table output as below on Dashboards & Visualizations. 07-30-2018 01:07 AM
- Posted eval - Error in 'eval' command: The expression is malformed. Expected ). on Monitoring Splunk. 07-29-2018 10:20 PM
- Tagged eval - Error in 'eval' command: The expression is malformed. Expected ). on Monitoring Splunk. 07-29-2018 10:20 PM
- Posted Re: how do I format the table output as below on Dashboards & Visualizations. 07-29-2018 04:20 PM
- Posted Re: how do I format the table output as below on Dashboards & Visualizations. 07-29-2018 04:19 PM
- Posted Re: how do I format the table output as below on Dashboards & Visualizations. 07-29-2018 04:14 PM
- Posted Re: how do I format the table output as below on Dashboards & Visualizations. 07-27-2018 11:36 PM
- Posted how do I format the table output as below on Dashboards & Visualizations. 07-27-2018 11:26 PM
- Tagged how do I format the table output as below on Dashboards & Visualizations. 07-27-2018 11:26 PM
Topics I've Started
08-07-2018
12:06 PM
Thank you
... View more
07-30-2018
08:19 AM
index=source 0oamhvpskG93fy30b297 OR amhpp7ohgExCpYDx51478
|stats count by Application
|lookup applications.csv application_id as Application
|addcoltotals labelfield=Application_name label=Total count
|fields - Application
Hello HiroshiSatoh,
My search above returns:
Error in 'lookup' command: Lookups: The lookup table 'applications.csv' does not exist or is not available.
The search job has failed due to an error. You may be able view the job in the Job Inspector.
5.3k ● 5 ● 5 ● 9
5.3k ● 5 ● 5 ● 9
... View more
07-30-2018
01:07 AM
Hi HiroshiSatoh, it does not work
... View more
07-29-2018
10:20 PM
index=abc123 | eval app=case(application==Application_1,"app_id_1",application==Application_2,"app_id_2") | stats count by app
This search returns: Error in 'eval' command: The expression is malformed. Expected ).
Can you let me know what's wrong with my search ? Thank you
... View more
- Tags:
- splunk-enterprise
07-29-2018
04:20 PM
a1,a2,a3,a4,a5 are the application id's. How do I name them as applications ?
a1 = app1
a2 = app2
a3 = app3
a4 = app4
a5 = app5
the output will be like this:
app1 23
app2 54
app3 73
app4 52
app5 56
Total 258
... View more
07-29-2018
04:19 PM
a1,a2,a3,a4,a5 are the application id's. How do name them as applications ?
... View more
07-29-2018
04:14 PM
Hi Adorio, it does not work
... View more
07-27-2018
11:36 PM
current search that i have below. This search only give me the total events , not categorize by application
index=source a1 OR a2 OR a3 OR a4 OR a5 | timechart span=1d count | sort -_time
... View more
07-27-2018
11:26 PM
index=source a1 OR a2 OR a3 OR a4 OR a5
how do I list the result them as
Application Count
a1 23
a2 54
a3 73
a4 52
a5 56
Total 258
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
