you could skip the | rename and just have | stats latest(State) as state... 🙂
May 04, 2020 at 11:35AM
via reddit https://www.reddit.com/r/Splunk/comments/gciel3/show_stopped_services/fpgoa6l?utm_source=ifttt
you could skip the | rename and just have | stats latest(State) as state... 🙂
May 04, 2020 at 11:35AM
via reddit https://www.reddit.com/r/Splunk/comments/gciel3/show_stopped_services/fpgoa6l?utm_source=ifttt