Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to count events with specified id, if there are three events successively

$
0
0
Hello I would like to make a search for a SLA who does the following: (id 700 is ok, 702 is nok) - Count number of events if there are three nok events (702) successively Example: 700, 700, 702, 702, 700, 702 should count as 0, because there aren't three events with id 702 successively 700, 702, 702, 702, 700, 700 should count as 1, because there are three events with id 702 successively How can I do that? Thanks for your help!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>