![]() If no timespan specifier is used, an appropriate timespan is chosen based on the time range of the search. Description: A sparkline specifier, which takes the first argument of an aggregation function on a field and an optional timespan specifier.Syntax: sparkline (count(), ) | sparkline ((), ).Sparklines are inline charts that appear within table cells in search results to display time-based trends associated with the primary key of each row. ![]() However, you can use only one BY clause.įrequently Asked Splunk Interview Questions Sparkline function options Each time you invoke the stats command, you can use more than one function.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |