Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to find min and max per hour during day by host ?

$
0
0
If I use such SPL index=_internal | timechart span=1h count by host | stats max(*) AS *."max", min(*) as *."min" | transpose this produce min and max mixed in one column but I would like separate max and min column

Viewing all articles
Browse latest Browse all 47296

Trending Articles