cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
baustin612
Explorer
Member since: ‎07-29-2020
‎08-06-2020
Community Statistics
Posts 3
Solutions 0
Karma Given 2
Karma Received 0
Member Since ‎07-29-2020
View All

Re: Display result when comparing 3 fields, only s...

by in Splunk Search
‎08-06-2020 01:17 PM
‎08-06-2020 01:17 PM
Thank you very much!  ... View more

Re: Display result when comparing 3 fields, only s...

by in Splunk Search
‎07-29-2020 02:53 PM
‎07-29-2020 02:53 PM
Thank you for the quick reply! How does this take into account status? I only want to display those where 'esb' timestamp is >= 'fuz' timestamp +100. ... View more

Display result when comparing 3 fields, only show ...

by in Splunk Search
‎07-29-2020 02:11 PM
‎07-29-2020 02:11 PM
I have a search that is giving me this data set: ID             status       Stamp alex         esb            1595989827764 alex         fuz             1595989827762 jake         esb            1596056447122 jake         fuz             1596056447085 josh         esb            1596054751935 josh         fuz             1596054751852 stefan    esb             1596056406846 stefan    fuz              1596056406806 I want to compare the Stamp by ID, and show any ID's where the stamp for esb is great than the stampe for fuz by at least 100. Any help appreciated. ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎08-06-2020 04:38 PM
Karma given to
View All