Created
May 21, 2014 08:06
-
-
Save neilstuartcraig/ac8df0a4b17c75ab6d7e to your computer and use it in GitHub Desktop.
Outputs a count of the number of hosts (servers, network appliances etc. including those whose hostname is just an IP address) which have at least 1 event logged into Splunk in the last 24 hours.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
index=* earliest_time=-24h host=* | eval h=lower(host) | stats distinct_count(h) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment