Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Can i use job.resultCount in splunk 6.2.14

$
0
0
Hi All, I am new to splunk and facing an issue with assigning token value based on condition. I'm using the following code
host="swaroops-MacBook-Pro.local" "Total Records processed" | stats count$earliest$$latest$$redlight_mod1.png$0case($result.count$>=1 ,"$greenlight_mod1.png$")$result.count$
$ST_upstream_value
My version of splunk is 6.2.14, and yes i did try after removing the $$ in greenlight_mod1.png as well. But the output i m getting is $ST_upstream_value$ and instead of image its showing as a ? mark in blue box. Looks like the lines after the condition match are not being executed. Can someone please tel me what is the error i m doing and if its the problem of version, do you know how i can achieve this with version 6.2.14. I would be really grateful, as i have spent almost 3 weeks stuck at this point. Thanks in advance.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>