Hi Mayurr98,
Thanks for the help.
I need something like this in my report
|Srv1 | 10.x.x.x| Windows|
|Srv2 | 10.x.x.x| Windows|
|Srv3 | 10.x.x.x| Windows|
|Tot Srv = 3(count of servers)|
Below is my search which i used for daily report, on top of this query i also need to count number of hostname that are present in this search result.
index= _internal fwdType ="*"
|eval lastUpdate=strftime(_time, "%d - %m -%Y %H:%M:%S")
|dedup hostname
| sort hostname asc
| table hostname, os, sourceHost, lastupdate
... View more