Getting Data In

How to get the latest timestamp from a log file?

abhi04
Communicator

How to get the latest timestamp from a log file?I need the latest logs from different source and their timestamp.

0 Karma
1 Solution

p_gurav
Champion

HI,

You can use this query:

  index=*  | stats latest(_time) by source

View solution in original post

0 Karma

493669
Super Champion

try this:

index=indexname|stats latest(timestamp) by source
0 Karma

p_gurav
Champion

HI,

You can use this query:

  index=*  | stats latest(_time) by source
0 Karma
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...