 
					
				
		
Hi all , 
This is my problem : I have  a table with time,log  and host. 
sample :
host 1  <event log> 2018-06-05 23:01:30
host 2  <event log> 2018-06-05 23:01:30
host 2  <event log> 2018-06-05 23:01:29
host 3  <event log> 2018-06-05 23:01:29
host 1  <event log> 2018-06-05 23:01:28
host 3  <event log> 2018-06-05 23:01:28
host 1  <event log> 2018-06-05 23:01:27
host 2  <event log> 2018-06-05 23:01:27
host 3  <event log> 2018-06-05 23:01:27
......
Now i want to only get was the latest and the previous
like this : 
LATEST
host 1    <event log> 2018-06-05 23:01:30
host 2    <event log> 2018-06-05 23:01:30
host 3    <event log> 2018-06-05 23:01:29
PREVIOUS 
host 1    <event log> 2018-06-05 23:01:28
host 2    <event log> 2018-06-05 23:01:29
host 3    <event log> 2018-06-05 23:01:28
Is there a way or workaround to get this result ?
Thanks in advance 
 
					
				
		
 
					
				
		
use dedup command to get latest 2 events :
...|dedup 2 host
 
					
				
		
I am not aware that i can do this , will definitely try this
