I would like to search for two consecutive ocurrences of an event (separated let's say 1 minute appart). I don't care if that event happended lots of times in the past, I just want to know if two of these ocurrences happend withing just 1 minute. Thanks in advace for your help
streamstats time_window=60s count
https://docs.splunk.com/Documentation/Splunk/8.0.4/SearchReference/Streamstats
How about this?