Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

getting sum stats from pair of values

$
0
0
Hi ! I am looking for help for, i think, a simple statistic but I can't figured out how to do this simply. Here's an example of my data : 1. Customer1=A, Customer2=B 2. Customer1=A, Customer2=C 3. Customer1=B, Customer2=A and I want spunk to count the number of event by pair of customer, like : Pair=AB, count=2 Pair=AC, count=1 I'm sure spunk can do that really easily but all I can do is that and it's pretty ugly and duplicate the result : eval pair1=Customer1. " / ". Customer2 eval pair2=Customer2. " / ". Customer1 eval pair=mvappend(pair1, pair2) stats count by pair Please help !

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>