Splunk Search

Splunk Report- How to remove item from results?

revanthammineni
Path Finder

Hi Splunkers,

I have results in the following way.

Country        Count

Japan                50

USA.                   70

China.                60

India.                  50

Tokyo.                5

Goal:

I want to add the count of Tokyo to Japan (55) and take off Tokyo from the results. Could anyone suggest me with a logic. TIA

Labels (2)
Tags (2)
0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @revanthammineni 

Just add following line in at the of the query  or before stats/chart/ that you are using in query 

| eval Country=if(Country="Tokyo","Japan",Country)

 

 

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated.
If your problem is resolved, then please click the "Accept as Solution" button to help future readers.

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...