I have questions about the top command.
First one is pretty simple.
How I can add sequential number column in top result table?
2nd one is.
Is there any way to use an additional conditional to top command? I want to do something like:
top limit=30 and percent > 1 ....
top limit=50 and count >= 10 ....
| top limit=30 | eval s_no =1 | accum s_no | top limit=30 | where percent > 1 | top limit=30 | where count >= 10
| top limit=30 xxx | where count > 10
Any idea for 1st question?
Try and see if the answer on this post can help answer your 1st question.
top limit=30 foo| where percent >= 1 | streamstats count as row | fields row,foo,count,percent
Great 🙂 glad it worked!