Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to get the latest events

$
0
0
Hi I have two csv which got indexed csv 1: Step No,Release Name,Execution Time,Status 1,TA,02-16-2018 at 10:32:32 UTC,Pass 2.TA,02-16-2018 at 10:32:33 UTC,Fail csv 2: Step No,Release Name,Execution Time,Status 1,TA,02-16-2018 at 12:40:42 UTC,Pass 2.TA,02-16-2018 at 10:41:43 UTC,Pass only Execution Time and Status will differ in both the file. indexing time(_time) will be "Execution Time" my question is i want to get the data from csv2 only as it is only having latest timestamp using pivot .. i don't want to show the data from csv1 as it is having earliest timestamp . Can somebody help me on this ? Thanks in advance

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>