Refine your search:

Hi,

is it possible to merge two or more event results in one? The events are from the same field.

Reason : I have a dashboard which can just show one result and it doens't recognize the other fields, just one. So I thought I merge all events in one line in a row.

How can I do this?

Thx

asked 05 Apr '12, 04:13

nebel's gravatar image

nebel
259529
accept rate: 66%


2 Answers:

Does the mvcombine command do what you want ?

link

answered 06 Apr '12, 03:48

Damien%20Dallimore's gravatar image

Damien Dallimore
8.6k3522
accept rate: 27%

link

answered 06 Apr '12, 03:28

jt_splunk's gravatar image

jt_splunk
411
accept rate: 14%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×40
×16
×12

Asked: 05 Apr '12, 04:13

Seen: 2,472 times

Last updated: 06 Apr '12, 03:48

Copyright © 2005-2014 Splunk Inc. All rights reserved.