Activity Feed
- Posted Re: Contingency: no results found on Splunk Search. 11-01-2013 02:50 PM
- Posted Contingency: no results found on Splunk Search. 11-01-2013 11:17 AM
- Tagged Contingency: no results found on Splunk Search. 11-01-2013 11:17 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
11-01-2013
02:50 PM
I used * just to make sure I was looking at the entire event set in case I was missing something. When I changed contingency to ctable (and changed nothing else), I get the table I expected. Interesting. Thanks for your reply.
... View more
11-01-2013
11:17 AM
I have two fields: EventCode (66 distinct values) and date_mday (28 distinct values)
But when I run:
' * | contingency EventCode date_mday '
On over 1.2M events I get no results. What am I doing wrong?
Thanks
Also, suggestion: If a field is mistyped, show it in red if it doesn't exist.
... View more
- Tags:
- contingency
