About dfexsplunk

dfexsplunk · ‎09-20-2016

This worked exactly. Tanx very much.

dfexsplunk · ‎09-20-2016

Tanx. This runs without error but does not find any results!

dfexsplunk · ‎09-20-2016

Tanx. Still the same error code produced.

dfexsplunk · ‎09-20-2016

Thanks for this sundareshr but no luck with it, I get the following error "Error in 'timechart' command: Repeated group-by field '_time'."

dfexsplunk · ‎09-19-2016

It's a query for a staked column chart. index=myCompIn source="/locatedin/mySrc.log" "Reply Back" "CAT-IN " "SOME STUFF" | append [search index=myCompIn source="/locatedin/mySrc.log" "CAT-IN | 91.8.1952.7.4 | (false true false)"] | append [search index=myCompIn source="/locatedin/mySrc.log" "CAT-IN | 91.8.1952.7.4 | (false false true)"]|timechart span=1d count AS aTXN | join _time [search index=myCompIn source="/locatedin/mySrc.log" RT_DCC_TYPE=converted | append [search index=myCompIn source="/locatedin/mySrc.log" "CAT-IN | 91.8.1952.7.4 | (false true false)"] | append [search index=myCompIn source="/locatedin/mySrc.log" "CAT-IN | 91.8.1952.7.4 | (false false true)"] | timechart span=1d count AS bTXN]

Posts	5
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎09-19-2016

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Can this query be written more efficiently?

Join the Conversation

Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Re: Can this query be written more efficiently?

Can this query be written more efficiently?