Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

export results to csv not matching total number of events ?

$
0
0
Hi , I have a search without any statistic/transformation command like index=abc earliest=-7d . I am geeting following information on events: 1. Total Events:689 (in timeline and eventCount in Job Inspector) 2. Events in "Events Section": If i navigate through all pages then there are total of 657 events and eventAvailableCount in Job Inspector. 3. If i export results to CSV then there are only 650 rows. I get that if i do not use statistic/transformation command then difference in point 1 and point 2 is valid. But field in eventAvailableCount in Job inspector shows the events available for export which should be 657. But when i export results to csv only 650 rows re exporting ? Any idea why is this happening ?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>