Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to get sum stats from pair of values

$
0
0
Hi! I am looking for help for, I think, a simple statistic but I can't figure out how to do this simply. Here's an example of my data : **1. Customer1=A, Customer2=B 2. Customer1=A, Customer2=C 3. Customer1=B, Customer2=A** and I want spunk to count the number of event by pair of customer, like : **Pair=AB, count=2 Pair=AC, count=1** I'm sure spunk can do that really easily but all I can do is that and it's pretty ugly and duplicates the result : **eval pair1=Customer1. " / ". Customer2 eval pair2=Customer2. " / ". Customer1 eval pair=mvappend(pair1, pair2) stats count by pair** Please help!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>