×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
vjajula
Engager
Member since: ‎09-24-2020
‎12-11-2021
Community Statistics
Posts 3
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎09-24-2020
Activity Feed
View All

Search multi-valued field with specific values in ...

by in Splunk Dev
‎10-12-2021 06:48 PM
‎10-12-2021 06:48 PM
Hi, I have another request similar to my previous post but with a variation Here is the multi-valued field ColY. ColY has only two values ON or OFF. I need to find all rows which changed values from ON to OFF or vice-versa in any order. Below is the example ColX ColY A123456 ON ON ON A123457 ON OFF ON OFF A123458 ON ON OFF ON ON ON OFF A123459 OFF OFF OFF A123460 ON ON ON OFF OFF OFF   Required output ColX ColY totalChanges A123457 ON OFF ON OFF 3 A123458 ON ON OFF ON ON ON OFF 3 A123460 ON ON ON OFF OFF OFF 1 ... View more

Re: Search multi-valued field with specific values

by in Splunk Dev
‎10-12-2021 06:36 PM
‎10-12-2021 06:36 PM
Thanks for the solution. This is perfect ... View more

Search multi-valued field with specific values

by in Splunk Dev
‎10-12-2021 05:42 PM
‎10-12-2021 05:42 PM
Hi All, Can someone help me with the following  ColY represents multi-value field. I want to search all rows which have null, 0 and someother values in ColY Based on the below example output rows should be for A123456, A123461  ColX ColY A123456 null 0 56789 987654 A123457 4332 A123458 54322 0 A123459 null 0 A123460 2345667 7665443 A123461 null 788765 0 A123462 876543 null     ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎12-11-2021 12:35 AM
Karma given to
View All