×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
keezy713
Loves-to-Learn
Member since: ‎11-16-2021
‎08-09-2023
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎11-16-2021
View All

Re: Ping a list of IP address based on search resu...

by in Getting Data In
‎08-08-2023 08:17 AM
‎08-08-2023 08:17 AM
What was the command that you used ? Query example? Thanks! ... View more

Re: Unable to subtract one days hours from previou...

by in Splunk Search
‎11-16-2021 10:22 AM
‎11-16-2021 10:22 AM
This is what I'm getting now. I think its just populating from all the Projects. Is there a way to get all the project (sum) TotalHours and then subtract that from the previous days total of TotalHours and then set x axis as _time and Y  axis as diff streamed across 2 weeks? Again thanks for your help      ... View more

Re: Unable to subtract one days hours from previou...

by in Splunk Search
‎11-16-2021 10:11 AM
‎11-16-2021 10:11 AM
Below is the query that I have now  Search |table PROJECT_NUMBER _time TotalHours | sort 0 PROJECT_NUMBER _time | streamstats values(TotalHours) as previousTotalHours current=f window=1 by PROJECT_NUMBER | eval diff=previousTotalHours-TotalHours Im trying to see if I can get just the diff streamed out over a time period ... View more

Unable to subtract one days hours from previous da...

by in Splunk Search
‎11-16-2021 08:43 AM
‎11-16-2021 08:43 AM
I am trying to create a Timechart that will list out the TotalHours of that day and then subtract the previous days TotalHours to see the Hours difference in each day. This needs to span 14 days   Basically I just need the Total Hours difference from One day to the next spanned across a timechart  This is the data and Query I have so far (not much) -------Search----- | where TotalHours != "0" AND _time>relative_time(now(), "-14d@d") | dedup PROJECT_NUMBER _time | table PROJECT_NUMBER TotalHours _time | sort by PROJECT_NUMBER   ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎08-09-2023 12:24 AM