SPL
Bucket Count by State over Index
Description
This search counts the amount of buckets per state for each index.
To learn more about | dbinspect go to:
http://docs.splunk.com/Documentation/Splunk/7.1.2/SearchReference/Dbinspect
1 0
|dbinspect index=* | eval state=case(state=="warm" OR state=="hot","hot/warm",1=1, state) | chart dc(bucketId) over index by state
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.