Splunk Search

Grouping by hosts

jylee
New Member

Is there a way for me to group all events by a list of hosts in one data center and then group all events by another list of hosts in another data center?

Specifically, I'd like to determine a traffic comparison between two sets of servers

Tags (1)
0 Karma
1 Solution

sdaniels
Splunk Employee
Splunk Employee

You could use the tagging feature to identify hosts by location. See link below. If you have a large number of hosts you might want to use a look up and have that list of hosts come from a .csv file, for example.

http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Tagthehostfield

... tag = datacenter1

View solution in original post

sdaniels
Splunk Employee
Splunk Employee

You could use the tagging feature to identify hosts by location. See link below. If you have a large number of hosts you might want to use a look up and have that list of hosts come from a .csv file, for example.

http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Tagthehostfield

... tag = datacenter1

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...