×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
shankaranantht
New Member
Member since: ‎11-23-2015
‎06-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎11-23-2015
View All

Re: How can i use stats in below mentioned Query?

by in Splunk Search
‎11-24-2015 06:24 AM
‎11-24-2015 06:24 AM
I Re-framed the query which u sent and got the result sundareshr . Thank you very much. ... View more

Re: How can i use stats in below mentioned Query?

by in Splunk Search
‎11-24-2015 01:55 AM
‎11-24-2015 01:55 AM
Thank u very much sundaresh. There was a small changes need to be done in the query, but i was unable to do it. I cannot able to get the expected result. I need the result as mentioned below . Applicationname partner ServiceName Succescount failcount Total AAA WEEEEE In Payee hand 12 0 67 Money Transfer 12 0 Money Validate 19 0 Money Receive 12 12 I'm using the below query. source=data.csv | eval status=if(isnotnull(Error), "Failed", "Success") |eval partnerids = coalesce(partnerid,PartnerId) | chart values(ApplicationName) as ApplicationName values(ServiceName) as ServiceName list(eval(if(status="Success", 1, 0))) as Succalt textess values(eval(if(status="Failed", 1, 0))) as Fail count(status) as Txns over partnerids Thanks in advance. ... View more

Re: How can i use stats in below mentioned Query?

by in Splunk Search
‎11-24-2015 01:49 AM
‎11-24-2015 01:49 AM
Thank u very much sundaresh. There was a small changes need to be done in the query, but i was unable to do it. I cannot able to get the expected result. Note: kindly find the attachment for my expected result. I'm using the below query. source=data.csv | eval status=if(isnotnull(Error), "Failed", "Success") |eval partnerids = coalesce(partnerid,PartnerId) | chart values(ApplicationName) as ApplicationName values(ServiceName) as ServiceName list(eval(if(status="Success", 1, 0))) as Succalt textess values(eval(if(status="Failed", 1, 0))) as Fail count(status) as Txns over partnerids ... View more

How can i use stats in below mentioned Query?

by in Splunk Search
‎11-23-2015 12:30 AM
‎11-23-2015 12:30 AM
Find below mentioned data Applicationname |Partners | Servicename | status DEE | WEEEEE |Money Transfer|Success DDD |CDDDDD | Money Transfer | Success DDD |FFFFFFF|Money Transfer |Failed AAA |WEEEEE |In Payee hand |Success DEE |WEEEEE |In Payee hand |Success DDD|CDDDDD |In Payee hand |Success AAA |WEEEEE|Money Transfer |Success AAA |WEEEEE |Money Validate |Success AAA |WEEEEE |Money Receive |Success AAA |WEEEEE |Cross Verify |Success I have framed the query like Sample Query Source =data.csv | eval status=if(isnotnull(Error), "Failed", "Success") | eval Failcount=case(Status="Failed",1) | eval Successcount=case(Status="Success",1) | stats count(Status) as Total_Transactions count(Failcount) as Failed_Transactions count(Successcount) as Success_Transactions values(Servicename) as Servicename values(Applicationname) as Applicationname by PartnerId | table partnerids ApplicationName ServiceName Success_Transactions Failed_Transactions Total_Transactions I need the result as mentioned in the attachment, can someone help me please Thanks in advance ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM