Mastering Splunk
上QQ阅读APP看书,第一时间看更新

Column values

You will find a column value element that provides the total results returned by a selected object over all time spans. You have the option to keep this element, change its label, or remove it. In addition, you can add new column value elements such as:

  • List distinct values
  • First/last value
  • Count / distinct count
  • Sum
  • Average
  • Max/min
  • Standard deviation
  • List distinct values
  • Duration
  • Earliest/latest