Get full access to Splunk Operational Intelligence Cookbook - Third Edition and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

Start your free trial

How to do it...

Follow these steps to pivot chart the top error codes:

Log in to your Splunk server.
Select the Operational Intelligence application.
Select the Datasets menu item from the application menu.
On Web Access > All Web Access > Error dataset row, select the Explore dropdown in the Actions column and Visualize with Pivot.
Configure the Pivot interface such that Filters is set to Last 24 hours, Split Rows is set to _time, _time Periods is set to Hours, Split Columns is set to status, and Column Values is set to Count of Error, as shown in the following screenshot:
You should see a count by status codes over 1-hour time periods. ...

Get Splunk Operational Intelligence Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now