I have the search below that shows the routers and how many times each has logged an RPD_MPLS_LSP_DOWN event.
index=XYZ sourcetype=JUNIPER RPD_MPLS_LSP_DOWN | stats count by ROUTER
My question is how do I list the routers that do not have any RPD_MPLS_LSP_DOWN event log?
RPD_MPLS_LSP_DOWN is one of the values for EVENT_TYPE field.
Thank you in advance.
↧