Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to fix my search to exclude a particular event type but get a count of all other event types?

$
0
0
Hi. My search which I want to count by eventtype has a stat for "eventtype=err0r". When I try to exclude it, the counts for the other event types are incorrect, even if I explicitly add the eventtypes of interest in the search. search | stats count by eventtype Does anyone have thoughts on this? Thanks

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>