About Orangebottle76

Orangebottle76 · ‎02-10-2023

So I have two columns one with an index and the other with the amount of hosts that index has, I just want to query that data from my lookup to that data I have in Splunk. Sorry if I have confused you 🙂

Orangebottle76 · ‎02-10-2023

Hi, that thread does not quite work for me. I have tried but it does not work for what I want. Thanks.

Orangebottle76 · ‎02-10-2023

I have a lookup which in column A is the index and column B is the number of hosts, I have this as a lookup. I would like to be able to query the number of hosts per index I have i.e. if I have three hosts in my lookup but splunk returns two I would like to see that number. Probably a difficult query but one I am struggling with - thanks in advance!

Orangebottle76 · ‎02-08-2023

Hi, thanks for the reply! I am doing it for hosts to see which are missing.

Orangebottle76 · ‎02-07-2023

So I have a search I run for an alert which looks for a missing event, it's a simple tstats that shows stuff within the last 30 days I would like to compare the 90 days variant in the same search and determine the missing events. Any ideas?

Posts	5
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎02-07-2023

Online Status	Offline
Date Last Visited	‎03-13-2023 03:23 PM

How to compare lookup with index and number of hos...

Comparing two time frames with the same search?

Re: Compare lookup with index and number of hosts ...

Re: Compare lookup with index and number of hosts ...

How to compare lookup with index and number of hos...

Re: Compare two time frames with the same search

Comparing two time frames with the same search?