Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Grouping the data and naming it as seprate field

$
0
0

Hi,

Let me know how to achieve the below scenario,

i have 4 alerts - a, b, c, d alerts and in that a,b alerts are from same issue but different timings. other c, d alerts are for different issues. now i want to group ( a, b)alerts under one name say A1 and other two alerts c, d in other name say A2. and want to group this A1 and A2 under one name as B1.

so the output will be

 B2

A1 A2

A, b c,d

How to achieve this?


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>