https://community.splunk.com/t5/Splunk-Search/Grouping-by-hosts/m-p/59955#M14753 <P>Is there a way for me to group all events by a list of hosts in one data center and then group all events by another list of hosts in another data center?</P> <P>Specifically, I'd like to determine a traffic comparison between two sets of servers</P> Thu, 24 May 2012 22:36:12 GMT jylee 2012-05-24T22:36:12Z https://community.splunk.com/t5/Splunk-Search/Grouping-by-hosts/m-p/59955#M14753 <P>Is there a way for me to group all events by a list of hosts in one data center and then group all events by another list of hosts in another data center?</P> <P>Specifically, I'd like to determine a traffic comparison between two sets of servers</P> Thu, 24 May 2012 22:36:12 GMT https://community.splunk.com/t5/Splunk-Search/Grouping-by-hosts/m-p/59955#M14753 jylee 2012-05-24T22:36:12Z https://community.splunk.com/t5/Splunk-Search/Grouping-by-hosts/m-p/59956#M14754 <P>You could use the tagging feature to identify hosts by location. See link below. If you have a large number of hosts you might want to use a look up and have that list of hosts come from a .csv file, for example.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Tagthehostfield">http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Tagthehostfield</A></P> <P>... tag = datacenter1 </P> Thu, 24 May 2012 22:48:29 GMT https://community.splunk.com/t5/Splunk-Search/Grouping-by-hosts/m-p/59956#M14754 sdaniels 2012-05-24T22:48:29Z