HI Rich,
Below is search output
Enabled Today Yesterday Difference
0.0 7 17 -10
1.0 3547 3749 -202
I would like to see the values that "10" and "202" correspond to in a new column say Added and Removed (since above are negative drop from yesterday they would be under Removed)
Below is the sample event output as well
6/4/20
7:39:52.000 AM
2020-06-04 07:39:52 [properties-data-container-10-C-1] INFO c.s.n.n.consumer.Receiver - topicName = properties.cmts, fqdn = mailhi0101m.hawaii.rr.com , enabled = 0.0
host = * source = /var/notes/noc/noc-properties-consumer.logsourcetype = noc-data-consumertopicName = properties.cmts
6/4/20
7:39:52.000 AM
2020-06-04 07:39:52 [properties-data-container-1-C-1] INFO c.s.n.n.consumer.Receiver - topicName = properties.cmts, fqdn = mailhi0102m.hawaii.rr.com , enabled = 0.0
host = * source = /var/notes/noc/noc-properties-consumer.logsourcetype = noc-data-consumertopicName = properties.cmts
I would like to see the value of fqdn in the Added or Removed Column as its unique and will tell me new fqdn Added or Removed
... View more