Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to display values in xyseries format?

$
0
0
How to display values in xyseries format? i have log like below tcp 0 0 12b8-splfwd02.nam.nsro:7171 poc-citi-luna1.nam.ns:50326 ESTABLISHED tcp 0 0 12b8-splfwd02.nam.nsro:7171 poc-citi-luna1.nam.ns:50326 TIME_WAIT tcp 0 0 12b8-splfwd02.nam.nsro:7171 poc-citi-luna2.nam.ns:50326 TIME_WAIT tcp 0 0 12b8-splfwd02.nam.nsro:7171 poc-citi-luna3.nam.ns:50326 ESTABLISHED tcp 0 0 12b8-splfwd02.nam.nsro:7171 poc-citi-luna4.nam.ns:50326 SYNC_SENT tcp 0 0 12b8-splfwd03.nam.nsro:7171 poc-citi-luna1.nam.ns:46756 TIME_WAIT tcp 0 0 12b8-splfwd03.nam.nsro:7171 poc-citi-luna1.nam.ns:46756 SYNC_SENT tcp 0 0 12b8-splfwd03.nam.nsro:7171 poc-citi-luna2.nam.ns:46756 TIME_WAIT tcp 0 0 12b8-splfwd03.nam.nsro:7171 poc-citi-luna3.nam.ns:46756 TIME_WAIT tcp 0 0 12b8-splfwd03.nam.nsro:7171 poc-citi-luna4.nam.ns:46756 ESTABLISHED tcp 0 0 12b8-splfwd04.nam.nsro:7171 poc-citi-luna1.nam.ns:46756 TIME_WAIT tcp 0 0 12b8-splfwd04.nam.nsro:7171 poc-citi-luna3.nam.ns:46756 SYNC_SENT tcp 0 0 12b8-splfwd04.nam.nsro:7171 poc-citi-luna2.nam.ns:46756 SYNC_SENT tcp 0 0 12b8-splfwd04.nam.nsro:7171 poc-citi-luna4.nam.ns:46756 ESTABLISHED tcp 0 0 12b8-splfwd04.nam.nsro:7171 poc-citi-luna2.nam.ns:46756 ESTABLISHED when i index, it is displaying only one status which is in last column but it is ignoring other values below is the search command i am using index=netstat | xyseries host HSM CONN_STATUS

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>