still a newbie, need help or ideas on how to check the status of a server if it's changed or stayed the same within the hour. here's an example of the status of a server.
You may be able to do that with the stats
command.
... | stats latest(ClusStatus) as lastState, dc(ClusStatus) as statuses by host
| eval changed = if(statuses>1, "Yes", "No")
| table host lastState changed
how do you get the up/down status? what query are you using?
You may be able to do that with the stats
command.
... | stats latest(ClusStatus) as lastState, dc(ClusStatus) as statuses by host
| eval changed = if(statuses>1, "Yes", "No")
| table host lastState changed