Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About aryamehr360
aryamehr360
New Member
Member since:
01-15-2020
09-09-2020
Community Statistics
| Posts | 16 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 01-15-2020 |
Activity Feed
- Posted Re: How to add certain character to a search result (Number)? on Splunk Search. 05-13-2020 09:58 AM
- Posted How to add certain character to a search result (Number)? on Splunk Search. 05-13-2020 08:59 AM
- Tagged How to add certain character to a search result (Number)? on Splunk Search. 05-13-2020 08:59 AM
- Posted Re: When using the rangemap command, how do I determine the order in which ranges display in tables and charts? on Splunk Search. 03-03-2020 12:23 PM
- Posted How to order the ranges display in tables and charts, when using the rangemap command on Dashboards & Visualizations. 03-03-2020 09:57 AM
- Tagged How to order the ranges display in tables and charts, when using the rangemap command on Dashboards & Visualizations. 03-03-2020 09:57 AM
- Tagged How to order the ranges display in tables and charts, when using the rangemap command on Dashboards & Visualizations. 03-03-2020 09:57 AM
- Tagged How to order the ranges display in tables and charts, when using the rangemap command on Dashboards & Visualizations. 03-03-2020 09:57 AM
- Posted Re: How to sum the percentage of this two value in the table and rename it as X and show it in the table next to other values?! on Splunk Search. 02-08-2020 03:06 AM
- Posted Re: How to sum the percentage of this two value in the table and rename it as X and show it in the table next to other values?! on Splunk Search. 02-07-2020 08:33 AM
- Posted Re: How to sum the percentage of this two value in the table and rename it as X and show it in the table next to other values?! on Splunk Search. 02-07-2020 02:59 AM
- Posted Re: How to sum the percentage of this two value in the table and rename it as X and show it in the table next to other values?! on Splunk Search. 02-06-2020 11:02 AM
- Posted Re: How to sum the percentage of this two value in the table and rename it as X and show it in the table next to other values?! on Splunk Search. 02-06-2020 10:44 AM
- Posted How to sum the percentage of this two value in the table and rename it as X and show it in the table next to other values?! on Splunk Search. 02-06-2020 02:31 AM
- Tagged How to sum the percentage of this two value in the table and rename it as X and show it in the table next to other values?! on Splunk Search. 02-06-2020 02:31 AM
- Posted Re: How to show single value + percent of it in chart on Dashboards & Visualizations. 02-05-2020 08:18 AM
- Posted Re: How to show single value + percent of it in chart on Dashboards & Visualizations. 02-05-2020 08:18 AM
- Posted Re: How to show single value + percent of it in chart on Dashboards & Visualizations. 02-05-2020 07:41 AM
- Posted Re: How to show single value + percent of it in chart on Dashboards & Visualizations. 02-05-2020 07:26 AM
- Posted How to show single value + percent of it in chart on Dashboards & Visualizations. 02-05-2020 06:16 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-13-2020
09:58 AM
Yes it work the issue was idd the - in the field name,
thanks.
... View more
05-13-2020
08:59 AM
I want to reformat any number of my search result to kWh ; as you see in pictures below for example 15 to 15 kWh.
... View more
- Tags:
- splunk-enterprise
Labels
- Labels:
-
eval
03-03-2020
09:57 AM
I want to order range from low amount of min/hour to high,
like this :
1S-1M, 1M-30M, 30M-1H, 1H-2H, 2H-3H, 3H-4H, 4H-5H, 5H-8H, 8H-10H, 10H-15H, 15H-More
I use this command;
| rangemap field=duration 1S-1M=0-60 1M-30M=61-1800 30M-1H=1801-3600 1H-2H=3601-7200 2H-3H=7201-10800 3H-4H=10801-14400 4H-5H=14401-18000 5H-8H=18001-28800 8H-10H=28801-36000 10H-15H=36001-54000 15H-More=54001-9999999999
| chart count by range
and I get this order range;
and I want to order them from 1S-1M, 1M-30M, 30M-1H, ... , 10H-15H, 15H-more.
... View more
02-08-2020
03:06 AM
Great , Thanks a lot
... View more
02-07-2020
08:33 AM
Can you tell me what is the right command to get this as well;
status percent
Idle 66.049679
X 28.704325
others 5.245997
... View more
02-07-2020
02:59 AM
Thank It workt, I also try to do some thing els to get the totaal percentage of this values :
SuspendedEV, Preparing, Error, Finishing, SuspendedEVSE, Unavailable
and show it as "others",
So I want this as a result :
status percent
Idle 66.049679
X 28.704325
others 5.245997
I try that but not working:
"Set status * for charging point"
| rex "charging point\s*(?P<charging_point>.*)"
| rex "Set status\s*(?P<status>.*?,*)\s"
| eval status=if(like(status,"Charg%"),"X",status)
| eval status=if(like(status,"SuspendedEV","Preparing","Error","Finishing","SuspendedEVSE","Unavailable"),"total",status)
| dedup charging_point
| top limit=20 status
| fields status, percent
... View more
02-06-2020
11:02 AM
No this is not working too see the result :
status percent X
Idle 66.049679
ChargeInProgress 24.379016
Charging 4.325309
SuspendedEV 3.366261
SuspendedEVSE 0.604201
Error 0.556248
Preparing 0.450753
Finishing 0.191810
Unavailable 0.076724
this add a field by X,
I want to Sum the percentage of "ChargeInProgress"24.379016 + "Charging":4.325309 = 28.704325 and show it in the table just with other status name for example: X,
so I want this as a result :
status percent
Idle 66.049679
X 28.704325
SuspendedEV 3.366261
SuspendedEVSE 0.604201
Error 0.556248
Preparing 0.450753
Finishing 0.191810
Unavailable 0.076724
... View more
02-06-2020
10:44 AM
this is not working,
CODE:
"Set status * for charging point"
| rex "charging point\s*(?P<charging_point>.*)"
| rex "Set status\s*(?P<status>.*?,*)\s"
| eval X = ChargeInProgress+Charging
| fields - ChargeInProgress,Charging
| dedup charging_point
| top limit=20 status
| fields status, percent
Result :
status percent
Idle 66.026646
ChargeInProgress 24.098746
Charging 4.555251
SuspendedEV 3.389498
SuspendedEVSE 0.597571
Error 0.538793
Preparing 0.489812
Finishing 0.225313
Unavailable 0.068574
NotMonitored 0.009796
... View more
02-06-2020
02:31 AM
As you can see in the picture there is 2 value (ChargeInProgress & Charging) which I know they are same (but whit the different name),
So I wish to Sum the percentage of this two value and rename it as X and showi it in the table next to other values,
I have try this :
"Set status * for charging point"
| rex "charging point\s*(?P<charging_point>.*)"
| rex "Set status\s*(?P<status>.*?,*)\s"
| eventstats sum(ChargeInProgress,Charging) as X
| dedup charging_point
| top limit=20 status
| fields status, percent
but not works, and same result :
status percent
Idle 71.397640
SuspendedEV 11.518077
Charging 9.131379
ChargeInProgress 4.996529
Preparing 1.456150
SuspendedEVSE 0.547640
Error 0.442961
Finishing 0.386764
Unavailable 0.122310
NotMonitored 0.000551
I would like to see this as a result
status percent
Idle 71.397640
X 14.127908
SuspendedEV 11.518077
Preparing 1.456150
SuspendedEVSE 0.547640
Error 0.442961
Finishing 0.386764
Unavailable 0.122310
NotMonitored 0.000551
... View more
- Tags:
- splunk-enterprise
02-05-2020
08:18 AM
Thanks for your help , solved Ja
... View more
02-05-2020
08:18 AM
Yes It works I use this commands
| where status="SuspendedEV"
... View more
02-05-2020
07:41 AM
For example I need % value of "SuspendedEV 12.897025"
and then
| eval percent=round(percent,0)
| fields percent
| `svg_viz_battery_percentage_simple(percent)`
to show that in a SVG battery
like this : 13%
https://drive.google.com/open?id=1AU9wYqdskwK2LCXJnVUzW6uBIRhY9FJj
link text
... View more
02-05-2020
07:26 AM
No I just need all % value in separate visualization in this case.
... View more
02-05-2020
06:16 AM
I would like to show each percent of my values sepratly in a dashboard,(Becuse of the SVG input)
How can I do dat ?!
for example I need this : SuspendedEV 12.897025
... View more
01-15-2020
02:16 AM
| stats sum("Sum of consumption") as Total_Consumption count as Session
I got as a result in splunk / statistics chart:
Total_Consumption 750.580
Session 25
Now I want to divide them to get the average of consumption per session, to show it on my dashboard.
... View more
Labels
- Labels:
-
stats
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-09-2020
03:49 AM
|
