×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
FaridHamidi
Engager
Member since: ‎07-22-2020
‎09-19-2024
Community Statistics
Posts 3
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎07-22-2020
Activity Feed
View All

How to table out two string fields under one field...

by in Splunk Search
‎06-10-2021 01:48 AM
‎06-10-2021 01:48 AM
    | eval Alert_Message_DISK = status_disk.": Disk utilization for ".host." is ".total_disk_utilization."%" | eval Alert_Message_DISKD = status_diskD.": Disk utilization for ".host." is ".disk_D."%" | table Alert_Message     I want to put these two string fields created using "eval" under one "Alert_Message". thank you. ... View more
Labels

Transforming table and merging columns

by in Splunk Search
‎11-03-2020 01:26 AM
‎11-03-2020 01:26 AM
Hi everyone.  I have this result of my sear ch here in table below. is there a way to transform the table into something like this,  separating the 2 rows (successful & unsuccessful) into merchand_id field. Thanks! ... View more
Labels

How to replace field value of one event with anoth...

by in Splunk Search
‎07-22-2020 09:06 PM
‎07-22-2020 09:06 PM
This is the data set from Fundamental 1. A lot of successful purchase events with same 'ProductName' doesn't include 'categoryId' as a field. So I want to put/replace the null 'categoryId' field with 'categoryId' which have the same 'ProductName'. How do I do it and scale it up to multiple events? For example, I want the Null value in the screenshot above replaced by the categoryId of the same ProductName. I hope I word this out clearly. Thank you in advance. ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎09-19-2024 10:42 AM
Karma given to
View All