Hi,
Im looking for a way to group and count similar msg strings.
I have the following set of data in an transaction combinded event:
Servicename, msg
SVCA, hostnamexyz: AIX abc- asdf PARTIAL
SVCB, hostnamezyx: AIX abc- asdf PARTIAL
SVCA, hostnamezyx: AIX abc- asdf PARTIAL
SVCB, serice response error 3 of 3
SVCC, service response error of 3
What I would like to achive is a statistic like that:
hostname*: AIX abc- asdf PARTIAL - SVCA - 2
hostname*: AIX abc- asdf PARTIAL - SVCB - 1
service response error of 3 - SVCB -1
service response error of 3 - SVC -1
The values of the msg field arent known and cannot be predicted.
Is there any command/addon/performant way in SPL to do such a statistic based on some citeria like "at least 3 words in a field matching"?
Many thanks in advance!
... View more