Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

how calc differences between count of different searches

$
0
0
Hi all. I have a first search: index=first sourcetype=type1 | stats count And a second: index=first sourcetype=data_sourcetype | join ID [search index="second" sourcetype="datatype2"] | stats count Both cases returns number of events. I need to calculate the number difference between the first's search value and the second. How i can proceed? Thanks!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>