Splunk Search
Highlighted

How to display latest value of CSV file?

Path Finder

Hello,

I want to display last value of CSV file.
i am displaying max power usage with query:

index="test" sourcetype="powertest" | chart max(Powerconsumption) as Max over host | sort 10 -max(Power_consumption)

This query will display two columns host and max(Power_consumption). i want to display one more column of latest power consumption by host.

What i need to add in my query?

Thanks in advance.

Geetanjali

Tags (1)
0 Karma
Highlighted

Re: How to display latest value of CSV file?

Influencer
index="test" sourcetype="power_test" | stats max(Power_consumption) as Max first(Power_consumption) as Recent by host
0 Karma