About WanLohnston

WanLohnston · ‎04-04-2024

Hi Everyone I was wondering how I would go about a stats count for 2 fields where 1 field depends on the other. So for example we have a field called service version and another called service operation. Operations aren't necessarily exclusive to a version but I was wondering if it was possible to do a stats count where it would display something like: Service 1 - Operation 1: *how many* - Operation 2: *How many* and so on. Is something like this possible?

WanLohnston · ‎04-04-2024

Yeah my sincerest apologies, can have difficulties at times with accurately describing what I'm looking for. I'll definitely checkout the below query. But essentially I'm just looking for a date value and request value to not change day to day unless the request value is higher on a different date value. Hopefully that's a more accurate description.

WanLohnston · ‎04-04-2024

Hi all, I was wondering if there's a way to create a search that I can add to a dashboard that'll present the Peak day and what the volume is over a 30 day period? Essentially when loading into the dashboard I was hoping it could save whatever day it occurred and not be replaced until a larger peak occurs. Assuming that's even possible. Possibly worded this poorly so feel free to ask any questions about what I'm trying to achieve.

WanLohnston · ‎03-25-2024

Ahh my mistake, which makes what I was reading in the documentation make much more sense thank you! I'll also accept this as the solution, apologies for my ignorance!

WanLohnston · ‎03-25-2024

Hi all, I was wondering if anyone could help with hopefully a simple question. I have a dashboard that is used to power a report that sends a pdf to a number of individuals via email but we're looking to extract some further data and I was wondering if I just simply edit the existing dashboard with a few more searches will that reflect in the report? Cheers,

WanLohnston · ‎12-18-2023

Hi! Thanks for taking the time, sadly this didn't work out for me. Ideally if I can keep the same format of: | timechart span=1s count AS TPS | eventstats max(TPS) as peakTPS | eval peakTime=if(peakTPS==TPS,_time,null()) | stats avg(TPS) as avgTPS first(peakTPS) as peakTPS first(peakTime) as peakTime | fieldformat peakTime=strftime(peakTime,"%x %X") With the addition of a couple lines for Min TPS and when it took place that would be ideal.

WanLohnston · ‎12-18-2023

Hi all, I have this query: | timechart span=1s count AS TPS | eventstats max(TPS) as MaxPeakTPS | stats avg(TPS) as avgTPS first(peakTPS) as peakTPS first(peakTime) as peakTime | fieldformat peakTime=strftime(peakTime,"%x %X") This currently outputs Max TPS when Max TPS took place as well as the AVG TPS. I was wondering if it's possible to also display Min TPS and when that took place? TIA

Posts	7
Solutions	0
Karma Given	4
Karma Received	0
Member Since	‎12-18-2023

Online Status	Offline
Date Last Visited	‎04-10-2024 10:58 AM

Stats Search help

Peak Day of the Month

Dashboards that power reports

Max/Min/Avg TPS

Stats Search help

Re: Peak Day of the Month

Peak Day of the Month

Re: Dashboards that power reports

Dashboards that power reports

Re: Max/Min/Avg TPS

Max/Min/Avg TPS

Are you a member of the Splunk Community?