cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
rogueakula
Explorer
Member since: ‎04-24-2017
‎07-06-2020
Community Statistics
Posts 4
Solutions 1
Karma Given 0
Karma Received 0
Member Since ‎04-24-2017
Activity Feed
View All

Re: Display timelines of multiple devies

by in Splunk Search
‎07-06-2020 11:27 AM
‎07-06-2020 11:27 AM
I worked it out. This is what I was looking for:   | tstats count where index=my_index sourcetype=my_sourcetype by host _time span=1h | eval time=_time | convert ctime(time) | xyseries time host count ... View more

Re: Display timelines of multiple devies

by in Splunk Search
‎07-06-2020 10:26 AM
‎07-06-2020 10:26 AM
Thank you for the reply. I put in what wrote and I get "No results found." I am really not sure why that would be. I have 65 devices sending millions of log entries to Splunk.   Here is the search that I am using, redacted   index=my_index sourcetype=my_sourcetype tstats prestats=t count by _time,host | timechart span=1h count by host   When I had the pipe (|) before the tstats it said that tstats needs to be the first item in the search. Thanks again for your help!   -Josh ... View more

How to create a dashboard showing timelines of sta...

by in Splunk Search
‎07-06-2020 08:40 AM
‎07-06-2020 08:40 AM
Good morning! I noticed today that a couple of my devices stopped sending logs to Splunk a couple of hours ago. I want to develop a dashboard to show the timelines of stats count by host over the past 24 hours. So, something like this that shows each of my devices for the past 24 hours in one dashboard:     I just want to be able to scroll through and make sure that all devices have logged something every hour for the past 24 hours.   I am pretty new to Splunk so I dont have a great knowledge base to pull from. Thank you very much for your help!   -Josh ... View more
Labels

How to generate a chart to display how often a dev...

by in Dashboards & Visualizations
‎04-24-2017 08:30 AM
‎04-24-2017 08:30 AM
I am looking to see how often all of my devices are sending logs to Splunk. We recently applied a hotfix and it seems that it has seriously degraded the number of logs, and the frequency that they are being received. I would like to graph it to see if they were indeed affected by this patch. Thanks! -Josh ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎07-06-2020 03:08 PM