I have some device logs and am trying to determine the outage (downtime) duration.
Problem I have here is that events are being constantly thrown and I have difficulty capturing the right one to determine the downtime
Difference between The FIRSTOCCURRENCE of the First "Interface Down" and the FIRSTOCCURRENCE of the First "Interface up" is the Total Outage Hours
According to the Example above : outage 1 (2016-10-12 16:11:17 - 2016-11-06 02:00:01) outage 2 (2016-11-08 00:56:09 - 2016-11-08 00:56:55)
Currently am using transaction command. But it takes the whole outage as outage hours i.e. outage_hours is 2016-10-12 16:11:17 - 2016-11-08 01:05:55