Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

multikv parsing of a table not picking all the values

$
0
0
I have a table like below: CPU0 CPU1 CPU2 CPU3 0: 1826872 0 0 0 IO-APIC-edge timer 1: 9 0 0 0 IO-APIC-edge i8042 4: 390 0 0 0 IO-APIC-edge 6: 2 0 0 0 IO-APIC-edge floppy 7: 179942 1727883 42238 36 IO-APIC hyperv 8: 0 0 0 0 IO-APIC-edge rtc0 when i apply multikv on these kind of events to get all the cpu0,1,2,3 values i just get few of them. For example CPU0 values of 1826872 is skipped and only 390 is picked up. Same is the case for all the other fields i want extracted. Instead of picking up all the values from the rows it is just picking up 1 value every few rows for the field. Please help. Thanks

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>