Hm, similar to that post, would I be able to do this kind of set manipulation (can also use table with count > 1 to make a set)? Take the Hosts that have logged from [-2hr ago, now] - Hosts that print the graceful exit message [-2hr ago, now] (excluding graceful exits) ------------------------------------------------------------------------------------------------------------------------------ Now we're left with running and crashed Hosts that have logged from [-2hr ago, now] - Hosts that have logged from [-1hr ago, now]. (excluding running and crashed hosts within [1hr ago, now]) Now we're left with still-running* and crashed Hosts that have ONLY logged from [2hr ago, 1hr ago]. In this case the "still -running ones" haven't logged from [1hr ago, now]. I'm going to declare them crashed. Does this work out? I'm unsure how to implement this
... View more
