Hi All,
I want to build a splunk query which will give us the host details, last_time_stamp, number_of_days_aged not reporting to splunk. The condition is that if the number of current day hosts not reporting is greater than 50 when compared with the current week number of hosts not reporting, then it should alert us with the details.