Splunk Search

Grouping field values which are in common

splunker12er
Motivator

My incoming logs has several hosts and many services running in each hosts.

I would like to generate a table from my logs in the below format.

HOST SERVICE
host1 chrome
      http
      taskmgr
host2 chrome
host3 http
      chrome
host4 servicex

What is the splunk command i can use ? Is there any per-defiened command for this fucntion

Tags (3)
0 Karma
1 Solution

wpreston
Motivator

How about something like this:

... your base search ... | stats values(SERVICE) AS SERVICE by HOST

View solution in original post

wpreston
Motivator

How about something like this:

... your base search ... | stats values(SERVICE) AS SERVICE by HOST

splunker12er
Motivator

thanks....

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...