About gregory_cordier

to4kawa · ‎05-23-2020

<search string> | bucket _time span=1h | stats dc(Serial) as dcSerial, dc(otherserial) as dcOtherSerial by _time | bucket _time span=1d | eval Processedtime=strptime(_time,"%s") | eventstats max(dcSerial) avg(dcSerial) max(dcOtherSerial) avg(dcOtherSerial) by Processedtime | where as_you_like use eventstats not stats

richgalloway · ‎04-03-2018

@gregory.cordier If your problem is resolved, please accept the answer to help future readers.

richgalloway · ‎11-15-2016

There is no need to change your license when you change your IP address. Licenses are not attached to addresses or host names.

ChrisG · ‎05-25-2016

I would say yes. There hasn't been any new feature work that I'm aware of, but you're talking about four years of bug fixes, and 4.3 reached its end of life over two years ago.

Posts	5
Solutions	1
Karma Given	1
Karma Received	0
Member Since	‎06-11-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Get values of several series during same timespan ...

Why are Windows event logs with MSSQLSERVER$AUDIT ...

Is the license for a single Splunk instance attach...

Should we upgrade our universal forwarders from 4....

Re: Get values of several series during same times...

Re: Why are Windows event logs with MSSQLSERVER$AU...

Re: Is the license for a single Splunk instance at...

Re: Should we upgrade our universal forwarders fro...

Join the Conversation