I have uploaded CSV file contains service names, the query which ever I am runing is not displaying the services names, if count is zero.
Ex : csv file contain row name Service_name and values service1, service2, service3, service4 ... service 50
I have added the row name in extract fields as service_name,
If I use the command ".. | chart count by service_name", it is not displying the values equal to 0 however I am getting the results for other services which ever is not zero.
Before your chart command, append the lookup file like this:
... | append [inputlookup <your lookup here>] | chart ...
Then reduce the count by one for each service name to account for the extra events appended.
Before your chart command, append the lookup file like this:
... | append [inputlookup <your lookup here>] | chart ...
Then reduce the count by one for each service name to account for the extra events appended.
Used field - NULL..
XML used inputlookup
worked there too...
It worked fine. Thanks Martin....
:-)
Hi,
Small modification, I have to do. I have to calculate status as well.
... | append [inputlookup service.csv] | chart count over service_name by status
I am getting a coulmn NULL if I run the query and alsi in XML also counting as NULL.
Can you please suggest what can I do for this.