Splunk Search

Compare today's search with yesterday's search

chandukreddi
Path Finder

Hello Team,

 

I have below search but I want to compare today's data with Yesterday's data in same way this week data with last week data, how do I do that?

source=/var/log/cassandra/system.log index=cassdb_dev host="hostname" GCInspector.java NOT tombstone_warn_threshold |rex "GC in (?<GCtime>\d+)"| timechart span=1s values(GCtime) as GCtime by host

 

I really appreciate your quick help!

 

Thanks

Chandra

Labels (1)
0 Karma

bowesmana
SplunkTrust
SplunkTrust
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...