- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
indeed_2000
Motivator
10-23-2021
01:16 AM
Hi
need to compare total numbers if they are different show table that present them
23:57:05.253 app module: PACK: Total:[1010000] from server1 Total:[C000001010000]
23:57:05.254 app module: PACK: Total:[1010000] from server1 Total:[C000001000000]
diff=second total - first total
expected output:
Time diff
23:57:05.254 10000
any idea?
Thanks,
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
indeed_2000
Motivator
10-23-2021
01:30 AM
after workaround do this with eval command.
index="myindex"
| eval diff=(total2 - total1)
| table _time diff
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
indeed_2000
Motivator
10-23-2021
01:30 AM
after workaround do this with eval command.
index="myindex"
| eval diff=(total2 - total1)
| table _time diff
