×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
andreas_roth
Engager
Member since: ‎03-31-2015
‎06-05-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎03-31-2015
Activity Feed
View All

Re: differences in multi-valued field over time

by in Splunk Search
‎03-31-2015 12:14 PM
‎03-31-2015 12:14 PM
nope... so there is a script, crawling a directory from time to time. I need to find out which files were created or deleted. ... View more

differences in multi-valued field over time

by in Splunk Search
‎03-31-2015 11:53 AM
‎03-31-2015 11:53 AM
Hi all, I'm getting events like this: time=11111 file=aaaa time=11111 file=bbbb time=11111 file=cccc time=11111 file=dddd time=22222 file=aaaa time=22222 file=bbbb time=22222 file=cccc time=22222 file=dddd time=22222 file=eeee time=33333 file=aaaa time=33333 file=bbbb time=33333 file=cccc time=33333 file=dddd time=33333 file=ffff ... time=99999 file=aaaa time=99999 file=bbbb now i want to determine the changes of the field "file" over time. I was trying to create transactions and using diff ... but this leads nowhere... 😞 Thanks for your help in advance, Andreas ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:03 AM
Karma given to
View All