Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

stats value(_time) delimiter

$
0
0
When I use stats values(_time) group by the list of values in my table is delimitated by comma's. ex: 10/25/2017 16:48:34,10/25/2017 17:17:11,10/25/2017 17:17:15,10/25/2017 17:17:17,10/25/2017 17:19:02,10/25/2017 19:10:03,10/25/2017 19:20:15,10/25/2017 19:32:48,10/25/2017 20:02:20,10/25/2017 22:01:18,10/25/2017 23:02:41,10/26/2017 00:02:11,10/26/2017 00:02:31,10/26/2017 03:25:27 When I use stats values(ip_address) group by the list of values in my table is eliminated by new lines. ex: 168.227.146.19 176.49.175.120 177.129.242.138 188.105.223.1 190.202.206.139 190.214.152.247 192.160.102.170 199.249.223.60 201.254.172.148 45.55.57.18 47.154.229.1 51.15.64.212 54.201.174.255 How do I get consistency? Preferably forcing the list of times to be delimitated by the new line

Viewing all articles
Browse latest Browse all 47296

Trending Articles