Skip to content

Commit 15b0f33

Browse files
updated summary example
1 parent 7f5438a commit 15b0f33

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -155,7 +155,7 @@ The following search might be useful to understand how many Intersight records o
155155
```SPL
156156
index=* sourcetype=cisco:intersight:*
157157
| dedup Moid
158-
| chart count by index, sourcetype, source
158+
| chart count by sourcetype, source
159159
```
160160

161161
You may also notice, if you are very familiar with the Intersight API, that there are things that are missing in Splunk that are present elsewhere. This is due to editorial pruning that is occurring in the Add-on. There are some object references in the API results that simply don't serve any purpose in Splunk. The Add-on is pruning these to improve the overall experience and optimize the amount of data that gets pushed to Splunk. Likewise, some of the items that are presented in the API as Mo.Ref references are expanded with certain properties selected. Thus, **most** of the mo.MoRef objects that you would encounter in the API are either removed or expanded into something more useful.

0 commit comments

Comments
 (0)