Hi Splunkers,
Please help...
I have a bunch of raw data containing my test results. My problem now is:
I want to compare test results of new coming in result / current result with all the raw data. I have test with the same name in the raw data, but I need to extract them with the 10 latest test results and compare them with the test results and plot a new column named Test Status.
The condition I wanted to make is:
*If current Test Result is Fail, check raw data Test Result, if raw data is Pass, then mark "New Issue" at Test Status,
If current Test Result is Fail, check raw data Test Result, if raw data is Error, then mark "Know Issue" at Test Status,
If current Test Result is Pass , then mark "No Issue" at Test Status. *
I have a query here but I can no longer continue..
source="Linux_HPPResult.csv" host="HPPLINUXTEST30" sourcetype="csv" |table Test_Name Test_Result Platform1 ImageName1 TestType strtime source | eval Test_Status=if(like(Test_Result,"%Error%"),"Known Issue","null") | streamstats count as col2 | eventstats values(Test_Result) as Test_Node by Test_Name | sort Test_Name asc | dedup Test_Name limit=10
Please refer to the image, my set of raw data is something like that. Test Status highlighted is the new column I wanted to add by comparing the test results.
Hope hearing from you guys soon! Thank you so much!! 🙂
... View more