Splunk Search

How to get only the latest values of a Parameter for each server?

abhi04
Communicator

I have multiple Parameters and their values lister for each server. I am using the beloq command at last:

chart limit=0 values(abc) over Parameter by Server_Name

No I want only latest Parameter value to be listed for each Parameter for every server. Lets say for parameter "A" we have two values b and c for Server 1 and one value d for Server2. So I want to list only value 'b' for server 1 and value 'd' for Server2 for Parameter "A". Like this for other Parameter as well.
Can someone help me on this?

Tags (1)
0 Karma

ansif
Motivator
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...