Splunk Search

Top 10 stores for each state

Smiddy
Loves-to-Learn Lots

Hello folks;

Completely new to SPLUNK.

I am trying to get a table of the 10 stores for each State for the current week (as Time) but have no clue how to write it.

I would like to see average Sales for each of those 10 stores, for each State, sorted -Avg_Sales

index = Store_Index...

Fields I guess would be State, Store, Time, Avg_Sales

 

I would appreciate any ideas you may have.

Thanks so much for your time.

Smiddy

Labels (3)
0 Karma
Get Updates on the Splunk Community!

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...