Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Separate the count of two fields into ranges

$
0
0
Hi - I have a dataset which contains two scan dates fields per server. There are 50000 events in the dataset, one event per server. hostname, days_since_hw_scan, days_since_sw_scan server1,2,3 server2,20,10 server3,5,19 .... ... I want to summarise the data set so that I have a count of both scan date fields within a range of days, eg Range of Days. hw_host_scan_count, sw_host_scan_count 0-5, x , y 6-10, x , y 11-15, x, y ... ... I can get this OK for one of the field using the chart command below but I am looking for a table which includes both fields. *chart count by hw_host_scan_count span=5* Any suggestions appreciated. Thanks.

Viewing all articles
Browse latest Browse all 47296


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>