Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About SCSC
SCSC
Explorer
Member since:
06-13-2022
07-03-2022
Community Statistics
| Posts | 16 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-13-2022 |
Activity Feed
- Posted Re: Overlay : Can I display 2 fields of overlay on separate Y axes(Y1 axes and Y2 axes)? on Building for the Splunk Platform. 07-04-2022 12:21 AM
- Posted Can I display 2 fields of overlay on separate Y axes (Y1 axes and Y2 axes)? on Building for the Splunk Platform. 07-03-2022 09:31 PM
- Posted Re: Join 2 index by 2 fields on Building for the Splunk Platform. 07-03-2022 05:56 PM
- Posted Re: How to set the Initial value of drilldown's token? on Splunk Enterprise. 07-01-2022 12:41 AM
- Posted How to set the Initial value of drilldown's token? on Splunk Enterprise. 06-30-2022 07:57 PM
- Posted Re: Join 2 index by 2 fields on Building for the Splunk Platform. 06-30-2022 05:09 PM
- Tagged Re: Join 2 index by 2 fields on Building for the Splunk Platform. 06-30-2022 05:09 PM
- Posted Re: Join 2 index by 2 fields on Building for the Splunk Platform. 06-29-2022 11:20 PM
- Posted Re: Join 2 index by 2 fields on Building for the Splunk Platform. 06-29-2022 09:30 PM
- Tagged Re: Join 2 index by 2 fields on Building for the Splunk Platform. 06-29-2022 09:30 PM
- Posted How to join two indexes by two fields? on Building for the Splunk Platform. 06-28-2022 10:32 PM
- Posted Re: Column Chart / How to change color of particular column on Building for the Splunk Platform. 06-28-2022 07:46 PM
- Posted How to change color of particular column? on Building for the Splunk Platform. 06-28-2022 12:34 AM
- Posted Re: create column chart on Splunk Search. 06-20-2022 11:26 PM
- Posted Re: create column chart on Splunk Search. 06-20-2022 11:11 PM
- Posted How to create column chart? on Splunk Search. 06-20-2022 10:41 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
07-04-2022
12:21 AM
I see. That's too bad. Thanks for your reply.
... View more
07-03-2022
09:31 PM
I made the column chart and overlaid 2 fields as line charts.
Can I display these 2 overlay fields on separate Y axes?
(One field : Y1 axes and Other field : Y2 axes)
... View more
07-03-2022
05:56 PM
I could do what I wanted to do! I owe it to you. Thank you very much.
... View more
07-01-2022
12:41 AM
It was solved thanks to you. Thank you very much !
... View more
06-30-2022
07:57 PM
I made drilldown from pie chart to scatter chart. Pie chart : <drilldown>
<set token="BU">$row.BU$</set>
</drilldown> search sentence of Scatter chart : <search>
<query>
index="indexA"
| search BU=$BU$
| eval XXX
</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search> Question : Can I set the Initial or default value of this token? I'm in trouble that scatter chart does not appear until you click something on pie chart.
... View more
Labels
- Labels:
-
using Splunk Enterprise
06-30-2022
05:09 PM
This is a sample. (Both of indexes have other fields. I took out only 3 fields what I needed.) indexA.PROCESS_NO = indexB.KOUTEI_NO indexA.TICKET_ID = indexB.WORK_NO indexA.csv KOUTEI_NO WORK_NO INTERVAL_DIFF 1 F00380006 24 5 F00280002 21 2 F00380005 37 5 F00390001 92 6 F00430009 23 1 F00380006 33 3 F00120006 32 5 F00280002 47 3 F00120005 32 2 F00380005 38 6 F00430009 35 3 F00120006 25 1 F00380006 16 4 F00380002 14 1 F00380006 3 2 F00380005 35 4 F00380002 6 4 F00380002 5 1 F00120010 23 4 F00380002 21 3 F00380003 3 2 F00380005 31 1 F00120010 9 3 F00380003 21 4 F00380002 14 5 F00280001 64 1 F00120010 12 4 F00380002 7 6 F00430009 20 1 F00120009 34 3 F00120003 5 2 F00380004 2 3 F00120012 12 1 F00380009 18 2 F00380008 29 3 F00120012 5 4 F00120008 15 3 F00120012 136 5 F00280006 34 1 F00120016 7 6 F00280003 17 1 F00120016 57 indexB.csv PROCESS_NO TICKET_ID REASON_NO 4 F00120008 63 1 F00120010 14
... View more
- Tags:
- join
06-29-2022
11:20 PM
I tried the way you taught me. index="indexA"
| table field1, field2, field3
| append [
| search index="indexB"
| table field4, field5, field6
]
| eval f1=coalesce(field1,field4)
| eval f2=coalesce(field2,field5)
| stats values(field3) as f3 values(field6) as f6 by f1 f2 But if f6 is not NULL, f3 is NULL and id f3 is not NULL, f6 is NULL 😞 ( can only take one field's figure)
... View more
06-29-2022
09:30 PM
>Your search would do a search like this (using 'if' rather than coalesce) search index_a_dataset OR index_b_dataset
| eval f1=if(index="A", field1, field4)
| eval f2=if(index="B", field2, field5)
| stats values(field3) as f3 values(field6) as f6 by f1 f2 can I "join" to use this search sentence without "join" command? | eval f1=if(index="A", field1, field4)
| eval f2=if(index="B", field2, field5) Can I rewrite | eval f2=if(index="B", field2, field5) to | eval f2=if(index="A", field2,field5) ?
... View more
- Tags:
- join
06-28-2022
10:32 PM
indexA
field1
field2
field3
A
1
1
A
1
2
A
1
3
A
2
5
B
1
4
B
2
3
B
3
2
C
1
6
C
2
7
indexB
field4
field5
field6
A
1
3
B
2
4
C
1
5
C
1
6
I want to join these 2 indexes by 2 fields (field1=field4 AND field2=field5)
Result :
field1
field2
field3
field6
A
1
1
3
A
1
2
A
1
3
A
2
5
B
1
4
B
2
3
4
B
3
2
C
1
6
5
6
C
2
7
... View more
Labels
- Labels:
-
other
06-28-2022
07:46 PM
I understand. Thanks for reply 🙂
... View more
06-28-2022
12:34 AM
I made the column chart like this images.
I want to change the color of particular column specified by field "No." , that is as "token" by other graph.
My ideal is third image.
I'm sorry if my English is wrong.
... View more
Labels
- Labels:
-
other
06-20-2022
11:11 PM
Thanks for reply. I think so too, but I cant make column chart....
... View more
06-20-2022
10:41 PM
I created this data table by "mvappend" command.
dont have "_time" column and have only 3months records.
MONTH itemA itemB itemC
2022-05
2022-06
2022-07
1
2
3
4
5
6
7
8
9
I want to create a column chart : x-axis : MONTH , y-axis : value from this data table. But I cant by using "chart" command.
Please let me know how to create. Sorry if there are any mistakes in this sentence.
... View more
Labels
- Labels:
-
chart
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-03-2022
10:23 PM
|
