Thanks to both of you for the extremely quick answer. Per richgalloway, I added | stats values(uptime)
and that gives me the desired result.
Thanks again to both of you.
... View more
We have a "Message" field that always contains the same verbiage except for a numerical value. I only want the numerical value.
Example: "The system uptime is 999999 seconds." (The quotes are not part of the Message text.)
How can I display only the 999999?
Thanks
... View more
We have a very detailed Splunk dashboard in our team and I want to be able to clone my own copy so I can make changes and dig into the searches without worrying about changing the dashboard I cloned FROM or any of the sub panels of that dashboard.
Question: Does my cloned dashboard have its own set of sub panels and searches such that my changing ANY part of my cloned dashboard WILL NOT change the original?
Thanks in advance for your help.
... View more