Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to get the dates which are not present in output for every ID?

$
0
0
Hi, I have ID and dates in my output. (consider this is the data from 02-07-2016 to 02-10-2016) e.g ID Ingestion_Date 1 2-10-2016 1 2-09-2016 1 2-07-2016 2 2-10-2016 2 2-08-2016 Now, I want to find the dates when these IDs did not get ingested. eg: Output should be: ID Ingestion_Date 1 2-08-2016 2 2-09-2016 2 2-07-2016 How can we achieve this Splunk? Thanks in advance!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>