Skip to content

Latest commit

 

History

History
48 lines (34 loc) · 831 Bytes

splunk.md

File metadata and controls

48 lines (34 loc) · 831 Bytes

Splunk

sort

| sort _time desc

see: sort - Splunk Documentation

stats

| stats count by status

chart

| chart stats count by status, host

timechart

| timechart count

see: Search commands > stats, chart, and timechart | Splunk

table

Returns a table that is formed by only the fields that are specified in the arguments.

| table _time, event

Remove duplicates

Both dedup and uniq works as a filter on the search results to remove any search result that is an exact duplicate. dudup however only looks at fields specified.

dedup

| dedup field1

uniq

| uniq