Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

why is Rangemap giving different results based on the label containing ">" or "

$
0
0
Hi all, I have a search with a rangemap that groups based on seconds. The smallest and first grouping is for a range of less then 30 sec. The label is "<30" with the values being from 0 - 30. This "label" gives a different result than the label "0-30". Here are the two examples with results: *| rangemap field=middle "<30m"=0-30 "30-60m"=30-60 "1-2u"=60-120 "2-4u"=120-240 "range": "<30m", "totalTransactions": "12568"* *| rangemap field=middle "0-30m"=0-30 "30-60m"=30-60 "1-2u"=60-120 "2-4u"=120-240 "range": "0-30m", "totalTransactions": "12913"* Has anyone experienced this before or know a solution? thanks in advanced, Simon

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>