Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

fieldformat individually is a pain

$
0
0
Related to my previous question on arbitrary lists of variables... sum(CPU*) seems to pull off an interesting trick of 1.) enumerating all possible variables starting with CPU Is there anyway to template their output name sum(CPU*) as CPU$BLAH$ which then leads to any way to do this en-masse for fieldformat? right now I'm using excel to generate the field list... which is slightly complex and painful. Would love something simple/elegant...

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>