how to compare compare stats counts and highlight in new field ?

[corehan]

Hello dear,

I want to compare stats count for same host and counts are not equal than create a new field and put "!" or whatever.

Hostname | Interface | Status | count | Alert

Scenario 1 ( clear, no alert )
HostA | InterfaceA | InterfaceA-up | 8
HostA | InterfaceA | InterfaceA-down | 8 |

Scenario 2 (Alert)
HostA | InterfaceA | InterfaceA-up | 8
HostA | InterfaceA | InterfaceA-down | 9 | !!!!!!!!!!!!!!!

Regards.

[corehan]

Thank you. But i have already stats count section and i can't combined with this new future;

Existing stats count;

|stats count by Date,host_name,ifName,Status |sort -count -ifName -Status -host_name

Regards:

[to4kawa]

But i have already stats count section
so, you can't combine .

[corehan]

I must ses Hostname,Interface and Status at the same time, Interface and Status not enough for me 😞

[to4kawa]

I see, I'm sorry to waste your time.