Refine your search:

I have a request from a user who wants to get some stats from the Exchange App around specific users. Namely they're looking for a count of incoming and outgoing messages.

There's a macro in the Exchange Application that would do what I need. Unfortunately, I would have to run it each time for each user they want to report on.

I was attempting to do something almost like a loop, passing the value from the csv lookup as an argument to the macro.

Is this possible?

Brian

asked 12 Apr '12, 12:47

Brian%20Osburn's gravatar image

Brian Osburn
2912422
accept rate: 23%


2 Answers:

map (http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Map) seems like it should be close to what you want, but I've always had the devil of a time getting it to do anything the way I would expect.

link

answered 12 Apr '12, 14:25

dwaddle's gravatar image

dwaddle ♦
18.8k3938
accept rate: 33%

It would be better to describe your use case in more detail. It's almost never a good idea to try to write your own loops in Splunk, nor it is usually advisable to use the map command.

link

answered 12 Apr '12, 14:54

gkanapathy's gravatar image

gkanapathy ♦
38.3k81229
accept rate: 41%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×328
×75

Asked: 12 Apr '12, 12:47

Seen: 991 times

Last updated: 12 Apr '12, 14:54

Copyright © 2005-2014 Splunk Inc. All rights reserved.