Thomas Bonfert
Thomas Bonfert
The [ctime](https://docs.splunk.com/Documentation/Splunk/8.2.2/SearchReference/Convert) function converts a given field to a human readable format, which can be provided with the optional timeformat (default: "%m/%d/%Y %H:%M:%S") parameter. In Splunk, the provided field can...
- The [mvcombine](https://docs.splunk.com/Documentation/Splunk/8.2.2/SearchReference/Mvcombine) command groups by all available columns except for \ (input param), _time and _raw column. Subsequently, the command puts for each group the values of in a...
- Takes a UNIX time value, X, as the first argument and renders the time as a string using the format specified by Y. - **The UNIX time must be...
- Min(X,...) and Max(X,...) functions take an arbitrary number of arguments and return the minimum and maximum per row, respectively. - Currently, our implementation is good for single value fields...
The [addtotals](https://docs.splunk.com/Documentation/Splunk/8.2.2/SearchReference/Addtotals) command computes the arithmetic sum of **all numeric fields** for each search result. Currently, we are not able to determine the numeric fields for a given table. The...
The following optional parameters are not yet supported by the streamstats cmd and will be ignored: allnum, reset_after, reset_before, reset_on_change, time_window