Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Displaying largest value from Multiple Extractions in each Event

$
0
0
Hi all, I have multiple events, where in each individual event Im extracting multiple fields using regex, essentially it looks like this where each BU is a separate field I'm extracting from the event BU1 - 84.5xx.x BU2- 83.5xx.x BU3- 83.6xx.x BU4- 85.xxx.x Essentially I want to compare all extracted fields from each individual event and display only the the highest number as another field lets say **largest_BU**, is there any way to do this? Thank you in advance.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>