How to display host one as up and host tow as down... - Splunk Community

Splunk ITSI

I am not receiving this log last 10 days from one host.

I want to display 2 hosts one host showing up other host showing down based on system.system_up_time metric log name

2 hosts
host one receiving System.System_Up_Time metric log
host two not receiving System.System_Up_Time past 7 days

How you are considering uptime. When I am trying to create the search to convert values into Days, cannot achieve it.

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...