Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to read different time slots from lookup table

$
0
0
Hi splunkers, I have a situation to read different operational hours of same bin size for the last 3 days Scenario: 9-10 10-11 11-12 12-13 13-14 14-15 15-16 .............23-24 Today 1 2 3 4 5 1 day before 1 2 3 4 5 2 day before 1 2 3 4 5 3 day before 1 2 3 4 5 As per Today's train scedule it will start at 10 operates till 12 after that it will take some rest and start again at 1 pm. Example: if today the train is in 1st hour of operation, i need to to count the alarmopened in 1st hour of operation for the last 3 days, divide it be 3 to compute average. If today's count of alarm opened is greater than the average, it will give alerts. The same happens for all hours of operation. Question: My problem is how can I take the same time slot of previous last 3 days. If Now my train in 2nd hour of operation, how can I get the 2nd hour of operation for the last 3 days Note: Bin size is same everyday running for 5 hours TIA

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>