Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About ttoine
ttoine
Explorer
Member since:
05-11-2016
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 05-11-2016 |
Activity Feed
- Posted Re: How do I add a field to my chart? on Splunk Search. 05-20-2016 02:51 AM
- Posted How do I add a field to my chart? on Splunk Search. 05-19-2016 07:46 AM
- Tagged How do I add a field to my chart? on Splunk Search. 05-19-2016 07:46 AM
- Tagged How do I add a field to my chart? on Splunk Search. 05-19-2016 07:46 AM
- Posted Re: How to replace all values for a field with "Other" that do not equal values A, B, or C? on Splunk Search. 05-18-2016 01:06 PM
- Posted Re: How to replace all values for a field with "Other" that do not equal values A, B, or C? on Splunk Search. 05-18-2016 12:31 PM
- Posted Re: How to replace all values for a field with "Other" that do not equal values A, B, or C? on Splunk Search. 05-18-2016 11:27 AM
- Posted How to replace all values for a field with "Other" that do not equal values A, B, or C? on Splunk Search. 05-18-2016 07:44 AM
- Tagged How to replace all values for a field with "Other" that do not equal values A, B, or C? on Splunk Search. 05-18-2016 07:44 AM
- Tagged How to replace all values for a field with "Other" that do not equal values A, B, or C? on Splunk Search. 05-18-2016 07:44 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
05-20-2016
02:51 AM
So I did it this is way to have the column I want.
| chart mode(clientip) AS ip_adress, count BY customer-account | sort -count | head 50
I use mode in case a customer account have more than one clientip in the events. (e.g someone using a smartphone or a laptop).
Now I need to find how to keep clientip in the statistics, but remove it from the visualization (or display it in an other way. But this is another question.
... View more
05-19-2016
07:46 AM
I am working on a graph in order to identify the most pinging customer accounts (traffic optimization, security). I would like to add the field clientip (relative to the customer-account, of course) in another column.
The top would be to have the graph, and when I pass the mouse over a bar, it should display the customer-account and the clientip. But if I can have at least the graph and the data below, that would be good enough.
| chart count BY customer-account | sort -count |head 50
I tried many ways, but I have an error, or no match. I don't see how to do that. Is it possible?
... View more
- Tags:
- chart
- splunk-cloud
05-18-2016
01:06 PM
after timechart, this is not working.
... View more
05-18-2016
12:31 PM
if I want to use rex mode=sed, or replace, how can I set the condition?
... View more
05-18-2016
11:27 AM
thanks. do you think it would be possible to do this in an other way that would use less resources?
... View more
05-18-2016
07:44 AM
I am working on a pie chart to identify the main categories of some data. Below are some possible values:
Apple
Peach
Perry
Strawberry
Blueberry
Cranberry
I would like to replace the value by "Other" when this is not Apple, Peach or Perry. How could I do that? using replace? using if?
... View more
- Tags:
- replace
- splunk-cloud
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
