Splunk

From John Freier
Jump to: navigation, search

Get the line result count. 

  host=server01 Error | stats sum(linecount) as Total

Get result count per day or hour 

 host=server01 Error | bucket _time span=hour |stats count by _time
Retrieved from "http://wiki.johnfreier.com/index.php?title=Splunk&oldid=1165"