Hi,
I have the following search and need to make a timechart of NoicerValues by APname. I tried this but there are not results.
index="ti-wifi" sourcetype=csv_wifi name=bsnMobileStationMacAddress
| rename values as MobileStationMacAddress
| join ip
[search index="ti-wifi" name=bsnMobileStationRSSI
| rename values as MobileStationRSSI ]
| join ip
[search index="ti-wifi" name=bsnMobileStationSnr
| rename values as MobileStationSnr]
| join ip
[search index="ti-wifi" name=bsnMobileStationAPMacAddr
| rename values as MacAddress ]
| lookup wifi.csv MacAddress OUTPUT APname
| eval MacAddress =APname
| eval totalCount = (MobileStationRSSI - MobileStationSnr)
| stats sum(totalCount) as totalNoice, count as Sessions by APname
| eval NoiceFloor = round(totalNoice/Sessions,0)
| timechart list(NoiceFloor) by APname
Thank you
Ed
... View more