Currently my splunk search to get a list of macs of the security cameras with their respective IP is
index = dhcp 00:04:7d 10.101.240.* |table dest_mac, dest_ip |dedup dest_ip | dedup dest_mac
How would I get it to check for multiple mac addresses with the same IP. This will indicate that the IP is not fixed.
Thank you!
Try
| stats values(dest_mac) as MacAddresses by dest_ip