Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

For all occurences, get the duration of a value dropping below a threshhold

$
0
0
I have events that show signal strength. What I want to do is determine the start_time, end_time and duration of any period where the signal strength drops below what is considered 'normal'. My events have two different signals: signal_id=1 and signal_id=2. Example event: _time, signal_id, signal_strength, normal_signal 2017-05-16 16:17:28, 1,17.38,14.28 Output I'd like to see: start_time,end_time,duration,signal_id

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>