Hello Splunkers,
I created a dashboard in splunk which is working fine based on our tests. When I moved it to production environment it shows false data. After going through the logs i found out that the exact same code shows duplicated values in the production environment.
I noticed that the code is fine, but after the following command, it shows duplicated values :
| stats list(RunTime) AS Run , avg(seconds) AS Average by SiteName, Country, SiteRegion
So the result before this line is:
**SiteName** **RunTime**
Prague 10.9
Prague 10.2
Prague 19.8
And the result after that line is:
**SiteName** **RunTime**
Prague 10.9
Prague 10.9
Prague 10.9
Prague 10.9
Prague 19.8
Prague 19.8
Prague 19.8
Prague 19.8
And so on.
I cannot really figure out why it happens, and also looking for a better solution than the dedup command.
Thank you.
... View more