I'm looking for a way to compare the data from the package.sh script for multiple servers. I'm running the script every 12 hours
I'm currently doing the following but it doesn't break out the data by server
sourcetype=package host=hostname OR host=hostname earliest=-12h@d latest=now
| eval output = toString(VERSION) + " - " + toString(RELEASE)
| makemv delim=";" output
| mvexpand output
| eval Day=if(_time<relative_time(now(), "@d"),"Previous","Current")
| rename NAME as Package
| chart values(output) over Package by Day
| where Previous!=Current
Thanks
