×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
ivtashev
New Member
Member since: ‎01-19-2016
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎01-19-2016
Activity Feed
View All

How to add a column to the results table based on ...

by in Splunk Search
‎04-25-2018 01:36 PM
‎04-25-2018 01:36 PM
Hello: I am trying to add a column to the results table, the reason for this is so that I can then use that value for populating a token. Here is the search: 1. <search here> 2. | chart latest(Data) AS "Data" over Time by Thread 3. | sort + Time 4. | eval Goal=25 5. | eval Min=18 6. | eval LastPrimer=Primer The results table of this looks like: Time Goal Min data1 data2 data3 0 25 18 29.2728 26.2105 14.8187 1 25 18 29.6007 28.9153 14.9330 I want to also see LastPrimer in the results table. Primer is an indexed field. ... View more

How to set up a chart drilldown in Simple XML so a...

by in Splunk Search
‎01-19-2016 08:36 PM
‎01-19-2016 08:36 PM
Hey all: I am fairly new to this. I have tried to set up a chart drilldown after which I can swap out the original search. I want to replace the original search with a new one based on the column I'm using which I ordered the chart. I found one article in the wiki that talks about this: http://docs.splunk.com/Documentation/Splunk/6.2.0/AdvancedDev/TableChartDrilldown#Swap_out_the_underlying_search, but the example there is in Advanced XML. I can only edit the view using Simple XML. Thanks in advance! Ivan ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM