Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About sridharadurthi
sridharadurthi
Engager
Member since:
07-08-2024
07-09-2024
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 07-08-2024 |
Activity Feed
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-09-2024 09:56 AM
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-09-2024 09:42 AM
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-09-2024 09:26 AM
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-09-2024 08:37 AM
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-09-2024 06:48 AM
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-09-2024 06:40 AM
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-08-2024 02:31 PM
- Posted Re: Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-08-2024 02:08 PM
- Posted Extract from Multiple Fields and Consolidate using Stats Count on Splunk Search. 07-08-2024 01:49 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
07-09-2024
09:56 AM
Finally it is working now 🙂 Thank you so much. You made my day.
... View more
07-09-2024
09:42 AM
@ITWhispererthanks for being patient with me. I have copied the same query which you have mentioned and this is the result index="apigee" sourcetype!="apigee:nginx" (ProxyPath="/xyz" OR ProxyPath="/abc") AND StatusCode=200 | eval "BackendResponse.content.reasonCode OR ConsumerResponse.content.reasonCode" = coalesce('BackendResponse.content.reasonCode', 'ConsumerResponse.content.reasonCode')
| stats count by 'BackendResponse.content.reasonCode OR ConsumerResponse.content.reasonCode'
... View more
07-09-2024
09:26 AM
No luck 😞
... View more
07-09-2024
08:37 AM
@ITWhisperer , I tried but no luck 😞 . It is displaying the count but not displaying the stats
... View more
07-09-2024
06:48 AM
@yuanliu this is the query which I am using to filter the data
index="apigee" (ProxyPath="/xyz" OR ProxyPath="/abc") AND StatusCode=200 | eval "BackendResponse.content.reasonCode OR ConsumerResponse.content.reasonCode" = coalesce(BackendResponse.content.reasonCode, ConsumerResponse.content.reasonCode) | stats count by "BackendResponse.content.reasonCode OR ConsumerResponse.content.reasonCode" StatusCode
It is showing the event count, but it is not generating the results. Highlited the same.
... View more
07-09-2024
06:40 AM
this is the query which I am using to filter the data index="apigee" (ProxyPath="/xyz" OR ProxyPath="/abc") AND StatusCode=200 | eval "BackendResponse.content.reasonCode OR ConsumerResponse.content.reasonCode" = coalesce(BackendResponse.content.reasonCode, ConsumerResponse.content.reasonCode)
| stats count by "BackendResponse.content.reasonCode OR ConsumerResponse.content.reasonCode" StatusCode
... View more
07-08-2024
02:31 PM
When I am trying your query, it is showing that number events on the top. But not displayin the results in the statistics. Like below
... View more
07-08-2024
02:08 PM
Thanks for swift reply @yuanliu . Here is the sample table I am looking for StatusCode A or B Count 200 some A/B value 2 200 some A/B value 1 200 some A/B value 10 200 some A/B value 8 200 some A/B value 5 A & B coulmns should come together as one and based on their values it should add to the count. More detailed way StatusCode A or B Count 200 Upgrade 2 200 Downgrade 1 200 Retain 10 200 Cancel 8 200 New Customer 5
... View more
07-08-2024
01:49 PM
Hi Team,
I have two different fields (Ex. A and B). Value A will come for some results and B will come for some. While I am using below query, it is only pulling A or B.
index="XYZ" (ProxyPath="/xyz" OR ProxyPath="/abc") AND StatusCode=200
| stats count by A StatusCode - only A events are getting displayed
index="XYZ" (ProxyPath="/xyz" OR ProxyPath="/abc") AND StatusCode=200
| stats count by B StatusCode - only B events are getting displayed
index="XYZ" (ProxyPath="/xyz" OR ProxyPath="/abc") AND StatusCode=200
| stats count by A B StatusCode - it is not displaying any table
How to display both A and B colums combined and have the status code as well in the table?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-09-2024
10:09 AM
|
