Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Consecutive events by field - only show points in time where number of such events equals 5

$
0
0
I'm trying to find points in time where a consecutive event happens 5 times in a row. I currently have this query: partner_id=9991| streamstats count BY timeout reset_on_change=true | table timeout, count, _time But it shows both timeout combinations and their increasing count.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>