Hello Splunker, I have a saved search for number of asset in our organization and that number is updated daily. I would like to create separate trend line panel to show the either weekly or daily number changes. My asset count is very complicate search and it is around 35k.  Any input will be very much appreciated. Thank you     ... View more

I am working on project to compare ip and MAC  whether they are seen from three different tool. Tanium, ACAS, HBSS. Tanium fields-- ip dnsname mac  ACAS--ip dnsname mac HBSS-ip dnsname mac So when I use join command, I was not able to include all ips from each respective tools since join only can use as inner/left/outer. Also another problem is the search takes like forever. Also only ACAS has root search with accelerated capability...   My goal is to see  like    ip                                       mac                                  dnsname       seen in ACAS  seen in Tanium seen in HBSS 123.21.323.422      22:22:22:22:22:22:22     abesdc              Yes                          No                         No   Any feedback for suggestion will be appreciated. Thank you ... View more