×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
learningquery
Explorer
Member since: ‎10-17-2023
‎11-02-2023
Community Statistics
Posts 6
Solutions 0
Karma Given 6
Karma Received 0
Member Since ‎10-17-2023
Activity Feed
Topics I've Started
View All

Re: conditional count(eval)

by in Splunk Search
‎10-26-2023 11:36 PM
‎10-26-2023 11:36 PM
absolutely,  I was too beginner to grasp it! ... View more

Re: conditional count(eval)

by in Splunk Search
‎10-26-2023 11:20 PM
‎10-26-2023 11:20 PM
I figured out the minor error was - "True" needs to be "true", as the value returns a boolean. ... View more

Re: conditional count(eval)

by in Splunk Search
‎10-21-2023 12:27 PM
‎10-21-2023 12:27 PM
Sorry, now I put the correct result (Pl ignore the previous result)   ... View more

Re: conditional count(eval)

by in Splunk Search
‎10-21-2023 12:23 PM
‎10-21-2023 12:23 PM
Thanks for the hint. Attached is the result I get. But want the total count of all TRUE cases listed per calendar week in numbers and also in % (I don't want the FALSE as result ). The attached .xls shows what I am looking for with example numbers     ... View more

Re: conditional count(eval)

by in Splunk Search
‎10-20-2023 02:26 AM
‎10-20-2023 02:26 AM
Thanks for providing the hints. I tried both the changes eval and random command it did not work unfortunately. While I am sure the data exists. ... View more

conditional count(eval)

by in Splunk Search
‎10-17-2023 11:03 AM
‎10-17-2023 11:03 AM
Hi community, | eval ycw = strftime(_time, "%Y_%U") | stats count(eval("FieldA"="True")) as FieldA_True,               count(eval('FieldB'="True")) as FieldB_True,               count(eval('FieldC'="True")) as FieldC_True by ycw | table ycw, FieldA_True, FieldB_True, FieldC_True I get 0 result even though there is data. Could anyone please suggest a correct query? BR ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎11-02-2023 04:56 PM
Karma given to