Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

single value display depending on value

$
0
0
hi! I have a single value chart wherein I want to display a certain value if that value is not equal to zero. I have three values, BAD, WARNING GOOD. when either each of these values turns to zero I will not display it in the single value and the non zero value will be the one displayed in my single value chart. here is my search: | ... mysearch |eval RT = T + Tt |eval Rt = R + Rr |eval Target= Rt * 600 |eval Bad = if((RT>Target),RT,0) |eval Warning = if((RT<=(Target-1)) AND (RT>(Target/2)),RT,0) |eval Good = if((RT<=((Target/2)-1)),RT,0)

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>