Hello everyone,
As i written in title, i started using Splunk recently. I would like to know if someone could help me:
I have created a dashbord for analyze windows events. I have a query like this:
index=windows sourcetype in (...) EventCode=* | stats count by EventCode
Using this search, i get a table with in a column the EventCode, and in the other column i have the count of how many times that specific eventcode has "appeared". And so far everything is fine.
How can i retrieve the number of all windows hosts? I can't figure it out, i'm trying in a lot of ways but nothing
Thnks for the help
... View more