Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Calculate and display count variance between same field across unique hosts by another field

$
0
0
I created a table showing a mv field1 count for the same transactions as they passed through sequential hosts A, B, C, D, E, F. I'm trying to create a similar table, but show the variances between the counts of hosts B and A, hosts C and B, hosts D and C, hosts E and D, hosts F and E, but haven't had any success Table I have: | chart count(Field1) over host by Field2 host 11/16 11/17 11/18 11/19 11/20 A 1028 112 4765 257 1046 B 1028 112 4765 257 1046 C 1028 112 4765 257 866 D 1028 112 4765 257 866 E 1027 112 4765 257 866 F 1027 112 4765 257 866 Table I want: tried counts+evals, delta, diff host 11/16 11/17 11/18 11/19 11/20 A 0 0 0 0 0 B 0 0 0 0 0 C 0 0 0 0 180 D 0 0 0 0 0 E 1 0 0 0 0 F 0 0 0 0 0 Any assistance would be much appreciated!

Viewing all articles
Browse latest Browse all 47296

Trending Articles