https://community.splunk.com/t5/Getting-Data-In/How-can-i-list-missing-and-new-events/m-p/389051#M69641 <P>So when you want to compare, do you want to compare against yesterday (e.g. list all events that came yesterday but not today etc)?</P> Mon, 24 Sep 2018 17:54:58 GMT somesoni2 2018-09-24T17:54:58Z https://community.splunk.com/t5/Getting-Data-In/How-can-i-list-missing-and-new-events/m-p/389050#M69640 <P>Hello, </P> <P>Every day Splunk forwarders collect different types of system events (warnings,errors,informations, criticals) from machines. These events are constantly changing: a new one appears, others disappear and some stay.</P> <P>What i want to do is count the number of missing/new events for every day and list them in a table by their ID and type.</P> <P>Thanks in advance</P> Mon, 24 Sep 2018 13:44:19 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-i-list-missing-and-new-events/m-p/389050#M69640 rsoufiane 2018-09-24T13:44:19Z https://community.splunk.com/t5/Getting-Data-In/How-can-i-list-missing-and-new-events/m-p/389051#M69641 <P>So when you want to compare, do you want to compare against yesterday (e.g. list all events that came yesterday but not today etc)?</P> Mon, 24 Sep 2018 17:54:58 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-i-list-missing-and-new-events/m-p/389051#M69641 somesoni2 2018-09-24T17:54:58Z https://community.splunk.com/t5/Getting-Data-In/How-can-i-list-missing-and-new-events/m-p/389052#M69642 <P>Exaclty. in comparison with yesterday i want a table with the missing and new events</P> Mon, 24 Sep 2018 21:12:34 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-i-list-missing-and-new-events/m-p/389052#M69642 rsoufiane 2018-09-24T21:12:34Z