Looking to chart when a host/device was last seen.
Host date server A 3/25/2012 server B 3/24/2012 server C 3/28/2012
Something like that. Date format doesn't have to be that way.
... | dedup host | table host _time
Use eval instead of fieldformat.
eval
fieldformat
Okay but when I got od odo a fieldformat such as | dedup host | fieldformat Stime = strftime(_time,"%m/%d/%Y") | table Stime
I get no output.
