My splunk search is something like this index=pqr host=xyz* NOT TYPE="*ABCDE*" | fields X, Y |timechart limit=0 span=10m count, avg(X) by Y | r " input = data . . . calculations . . . output =mydataframe" the results i see in splunk after the search resembles this I want to go from above results in above picture to the ones in the picture below In R to achieve the data transformation from picture one to picture two, all I do is mydataframe<-mydataframe[complete.cases(mydataframe), ] The above does nothing but a subset on all rows of the original dataframe ignoring completely all rows that have atleast one NA in it , leaving me with just the rows that don't have any NA present in them. How do I achieve this transformation from first picture to the second using splunk processing language? ... View more

After a The splunk+R search , index=pqr host=xyz* NOT TYPE="*ABCDE*" | fields X, Y |timechart limit=0 span=10m count, avg(X) by Y | r " input = data . . . calculations . . . output =mydataframe" output is nothing but a dataframe that looks like this (dummy values) V1 V2 A B C 1 2 3 4 5 3 4 2 5 4 1 2 0.5 1 1 2 The operations i want to do are : D$Result1 <- ifelse(D$A > 0.05 & D$B > 0.05, "Equal", "") D$Result2 <- ifelse(D$A < 0.05 & D$B > 0.05 & D$C < 0, "Slower", "") D$Result3<-ifelse(D$A=0.05& D$B> 0.06 & D>0, "Faster", "" ) ,. . . so on so that I arrive at (look at first image) and then combine intermediate results into a final results column D$Result <- paste(D$Result1, D$Result2, D$Result3, sep = "") and arrive at (look at second image) How do I achieve this in Splunk using Splunk's search processing language? This is the sample input and output from R Studio: From the above I want to arrive at this : (Displaying only final and required results): ... View more

I have a basic search like this: index=pqr host=xyz* NOT TYPE="*ABCDE*" | fields X, Y |timechart limit=0 span=10m count, avg(X) by Y And I search it using the date range. Today, I tried choosing a date in the past and another one into the future . I expected to be thrown an error, but the search ran without errors. Why? Today is the 3rd. The date I chose was the 4th. ... View more

I am using the R Project with splunk. My query goes something like index= abcd host= pqrs NOT host=aacd NOT host = ppwqrs | fields DUR, TYPE | timechart limit=0 span=10m count, avg(DUR) by TYPE | r " data= input avg.calls.day <- function(calls){ total.calls <- sum(calls) out <- total.calls/ndays return(out) } output = avg.calls.day" But it keeps throwing me this error command="r", cannot coerce class ""function"" to a data.frame. Why am i getting this error and how do I resolve it? ... View more