Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Compare values in couple of fields

$
0
0
Hello, I would like to find differance between values in couple of fieldes for two months. I figure out how to do that just for one filed |set diff [search index = test_im REPORT_PERIOD="2015-10-01 00:00:00"| stats count by Client Type Type2| fields - count] [search index = test_im REPORT_PERIOD="2015-09-01 00:00:00"| stats count by Client Type Type2 | fields - count] However for couple if not working properly. It would be nice to the result like (unique difference values) Client Type Type2 <difference unique values> <difference unique values> <difference unique values> Thank you

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>