search - How to draw a splunk chart depicting no of occurrences for different strings? -
i want draw splunk chart , have following strings in logs:
"request id: 552" "request id: 223" "request id: 365" "request id: 552" "request id: 552" "request id: 223"
i want create chart x axis values request ids (552,223,365) , y axis values number of occurrences of these request ids. splunk search query work?
try query, fill index details in both main search , sub search assuming field-name log,
index=... | append[search index=... | eval req_id=ltrim(log,"request id: ")] | stats count(log) req_id_count req_id | table req_id,req_id_count
this should work.
Comments
Post a Comment