About maverick27

maverick27 · ‎04-03-2024

NO. It doesn't work in trellis layout even though the result is sorted. I am already using the following in the query: sort 0 group S_no

maverick27 · ‎04-03-2024

Hello, Thankyou @ITWhisperer @meetmshah for the quick revert and apologies for the delay in response. The solution indeed works. However, when I try to create a trellis layout (split by S_no), the graphs are displayed in the original order (1,3,2,4,5,6) and not how I want it to be i.e. 1,2,3,4,5,6. Is this a bug by any chance?

maverick27 · ‎03-27-2024

Hello Splunk Experts, Lets say i have a table that contains 2 columns as shown below: Name S_no aaa 1 ccc 3 bbb 2 ddd 4 eee 5 fff 6 ggg 1 iii 3 hhh 2 jjj 4 kkk 5 lll 6 mmm 1 ooo 3 nnn 2 ppp 4 qqq 5 rrr 6 Now, I need to sort every 6 rows of 's_no' column and populate the table. Something like this: Name S_no aaa 1 bbb 2 ccc 3 ddd 4 eee 5 fff 6 ggg 1 hhh 2 iii 3 jjj 4 kkk 5 lll 6 mmm 1 nnn 2 ooo 3 ppp 4 qqq 5 rrr 6 Could you please help me with the query? Much appreciated!

maverick27 · ‎02-01-2024

May be I wasn't clear with my requirement. Apologies guys! Let me give you an example as to what I'm trying to do. 1st search contains the following data: Field1 DEPT UID 1 Accounts AA 3 HR CC 5 Ops EE 7 Tech GG 9 Ops II 10 Tech JJ 11 HR KK 2nd search contains the following data: Field2 REGION 2 NA 4 TY 6 HK 8 AS 10 EU 11 AS Now, I need to get common as well as disctinct rows from both the tables as shown below: Result DEPT UID REGION 1 Accounts AA 2 NA 3 HR CC 4 TY 5 Ops EE 6 HK 7 Tech GG 8 AS 9 Ops II 10 Tech JJ EU 11 HR KK AS

maverick27 · ‎02-01-2024

Totally agree. I value everyone's contribution and restricting my question only to a certain individual will only delay or prolong the process. Apologies for that. This won't be repeated. Let me try @gcusello's solution and get back! Thanks guys!

maverick27 · ‎01-31-2024

Hi @ITWhisperer , I have two datasets from two search queries. I need to fetch the common as well as distinct values from both the datasets in the final result. Something like this: Field1 Field2 Result 1 2 1 3 4 2 5 6 3 7 8 4 9 10 5 10 6 7 8 9 10 Can you please help with the query?

maverick27 · ‎12-06-2023

@ITWhisperer Thank you for the quick revert. It worked! 🙂

maverick27 · ‎12-06-2023

Hi Splunk Gurus, @ITWhisperer I need your expertise in solving a rather simple issue which is taking lot more hours for me to solve. I'm trying to create a table in Splunk which should display Grand Total under each row and also display Compleion% under "Completed" field. I'm able to achieve the grand total using addcoltotals. However, I'm unable to display the completion% under "Completed" field. Here is how the table should look like: Name Remaining Completed Alice 25 18 Bob 63 42 Claire 10 7 David 45 30 Emma 80 65 Grand Total: 223 162 Completion% 42.07% percetnage calculation = 162/(223+162)*100 I tried using eval function to calculate the percentage but it calculates for each row in a new field. Can you please help me out? Many thanks. Much appreciated!

maverick27 · ‎12-04-2023

This is a follow up question though.. I was wondering if we can display the NCAPTest='Yes' or 'No' count along with percentage? And any way to add a percentage symbol(%) on the y axis which has intervals of 50?

maverick27 · ‎11-30-2023

You are a genius. Thank you so much @ITWhisperer . Much appreciated! 🙂

maverick27 · ‎11-26-2023

Hello Splunk experts, I'm pretty new to splunk and I would like your help in forming a query for the following requirement. I would like to create a bar chart for each OEM (total of 5 seperate bar charts widgets since we have 5 OEMs) based on the completion progress of NCAPTest. So, these events will be pushed to Splunk every Monday. The x-axis should show the timestamp(_time) in the following format(YYYY-MM-DD) and the y axis should show stacked bar graph where bottom portion of the bar should show completed count(NCAPTest=Yes) along with the completion percentage and the top portion should show the remaining count(NCAPTest=No). This is how the data looks like: 6 Nov, 2023 events: OEM Model Type NCAPTest Honda Civic Sedan No Honda CR-V SUV Yes Honda Fit Hatchback No VW Jetta Sedan Yes VW Tiguan SUV Yes VW Golf Hatchback No Tata Harrier SUV Yes Tata Tiago Hatchback No Tata Altroz Hatchback No Kia Seltos SUV No Kia Forte Sedan No Kia Rio Hatchback No Hyundai Elantra Sedan No Hyundai Kona SUV Yes Hyundai i20 Hatchback No 13 Nov 2023 events: Honda Civic Sedan Yes Honda CR-V SUV Yes Honda Fit Hatchback No VW Jetta Sedan Yes VW Tiguan SUV Yes VW Golf Hatchback No Tata Harrier SUV Yes Tata Tiago Hatchback No Tata Altroz Hatchback Yes Kia Seltos SUV No Kia Forte Sedan Yes Kia Rio Hatchback Yes Hyundai Elantra Sedan No Hyundai Kona SUV Yes Hyundai i20 Hatchback No 20 Nov 2023 events: Honda Civic Sedan Yes Honda CR-V SUV Yes Honda Fit Hatchback Yes VW Jetta Sedan Yes VW Tiguan SUV Yes VW Golf Hatchback Yes Tata Harrier SUV Yes Tata Tiago Hatchback Yes Tata Altroz Hatchback Yes Kia Seltos SUV Yes Kia Forte Sedan Yes Kia Rio Hatchback Yes Hyundai Elantra Sedan Yes Hyundai Kona SUV Yes Hyundai i20 Hatchback Yes Any help is greatly appreciated.

Posts	12
Solutions	0
Karma Given	6
Karma Received	0
Member Since	‎11-21-2023

Online Status	Offline
Date Last Visited	‎04-03-2024 05:02 AM

How to sort every 6 rows of a column in splunk?

How to find common and distinct data from two data...

Calculate completion% for a specific field in a ta...

Need help in creating a stacked bar chart graph sh...

Re: How to sort every 6 rows of a column in splunk...