About adityainamdar89

adityainamdar89 · ‎07-01-2014

Thanks..I figured out the solution 🙂

adityainamdar89 · ‎07-01-2014

I found this solution to my problem: | stats delim=":" list(XYZ) as XYZ BY CRITERIA | rex mode=sed field=XYZ "s/:/\n/g" This gives you the results on new lines in the table emailed from splunk.

adityainamdar89 · ‎06-30-2014

How to use delim with stats? Multivalued fields generated after using list() in stats is resulting in space-separated values to be emailed to me in a scheduled search rather than them appearing on a new line. Will delim be helpful? If not, is there any other way?

adityainamdar89 · ‎06-25-2014

The following worked for me: stats values(MAP_TYPE) as MAP_TYPE, values(MAP_NAME) as MAP_NAME, sum(EXECUTED) as Total_Time, count as Num_of_Executions, avg(EXECUTED) as Avg_exectime, perc80(EXECUTED) as 80th_percentile BY TRANSLATION_UID,DOCUMENT_TYPE. This worked for me only because there is a one to one mapping between the other Group by fields and MAP_TYPE,MAP_NAME. Due to this the values() converted the duplicates to a single value. Else this solution would not have worked.

adityainamdar89 · ‎06-25-2014

I am trying the following search. EXECUTED, TRANSLATION_UID, DOCUMENT_TYPE are present in the logs but MAP_TYPE and MAP_NAME are not yet added. They will be added later. The search should work without them and MAP_TYPE, MAP_NAME should get added to the group by list once they are in the logs. ...| stats sum(EXECUTED) as Total_Time, count as Num_of_Executions, avg(EXECUTED) as Avg_exectime, perc80(EXECUTED) as 80th_percentile BY TRANSLATION_UID,DOCUMENT_TYPE, MAP_TYPE*,MAP_NAME* I tried the above seeing the following search for adding optional fields as follows: table Total_Time,Num_of_Executions,MAP_TYPE* MAP_NAME* TRANSLATION_UID DOCUMENT_TYPE It works. But when I added ' * ' to fields in group by list it does not work. Thanks for your help in advance!!

Posts	5
Solutions	1
Karma Given	4
Karma Received	4
Member Since	‎06-01-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

How to use delim with stats?

Group By optional fields in splunk

Re: How to use delim with stats?

Re: How to use delim with stats?

How to use delim with stats?

Re: Group By optional fields in splunk

Group By optional fields in splunk