About pitshot

pitshot · ‎07-20-2014

Perfect, I was making the search into something way to complicated. The append works great Thanks

pitshot · ‎07-20-2014

What I am trying to accomplish. Search for three items X Y and Z . Count the total number of events for each X Y Z . Display any results from X or Y and only display Z when the count is above 1. I am having trouble with the last part of this search. I am not sure how to process the count of the Z result and drop results below the count of 1. I have tried several techniques but I have not had any success in putting the searches together.

pitshot · ‎06-04-2014

Perfect, Thanks

pitshot · ‎06-04-2014

Using Splunk v 5.04 I have a lookup table containing devicename,interfacename,speed . Each device name can have multiple interfaces associated with it. What I am trying to do is count the interfaces associated to a particular devicename. |inputlookup LUTOPO | search DEVICENAME="rr1.yyz3*" AND SPEED>=10000000000 | stats count(INTERFACENAME) as count | table DEVICENAME count The search returns a count of the interfaces but does not show the devicename in the table.

Posts	4
Solutions	0
Karma Given	0
Karma Received	2
Member Since	‎01-31-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Filtering results by count on one item

Lookup table question

Re: Filtering results by count on one item

Filtering results by count on one item

Re: Lookup table question

Lookup table question

Join the Conversation

Filtering results by count on one item

Lookup table question

Re: Filtering results by count on one item

Filtering results by count on one item

Re: Lookup table question

Lookup table question