Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to pass value of "by" field when charting "over" and "by"

$
0
0
I've tried all of the built-in drill-down token options. None of them captures the value of the by field when used with over. | chart count(TaskName) over ExitStatus by TaskName

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>