How to GET latest and previous events from a different host?

jadengoho — Wed, 06 Jun 2018 03:28:14 GMT

Hi all ,
This is my problem : I have a table with time,log and host.
sample :

host 1  <event log> 2018-06-05 23:01:30
host 2  <event log> 2018-06-05 23:01:30

host 2  <event log> 2018-06-05 23:01:29
host 3  <event log> 2018-06-05 23:01:29

host 1  <event log> 2018-06-05 23:01:28
host 3  <event log> 2018-06-05 23:01:28

host 1  <event log> 2018-06-05 23:01:27
host 2  <event log> 2018-06-05 23:01:27
host 3  <event log> 2018-06-05 23:01:27

......

Now i want to only get was the latest and the previous
like this :

LATEST
host 1    <event log> 2018-06-05 23:01:30
host 2    <event log> 2018-06-05 23:01:30
host 3    <event log> 2018-06-05 23:01:29

PREVIOUS 
host 1    <event log> 2018-06-05 23:01:28
host 2    <event log> 2018-06-05 23:01:29
host 3    <event log> 2018-06-05 23:01:28

Is there a way or workaround to get this result ?
Thanks in advance

Re: How to GET latest and previous events from a different host?

493669 — Wed, 06 Jun 2018 03:41:11 GMT

use dedup command to get latest 2 events :

...|dedup 2 host

Re: How to GET latest and previous events from a different host?

jadengoho — Wed, 06 Jun 2018 03:48:32 GMT

I am not aware that i can do this , will definitely try this

topic Re: How to GET latest and previous events from a different host? in Getting Data In

How to GET latest and previous events from a different host?

Re: How to GET latest and previous events from a different host?

Re: How to GET latest and previous events from a different host?