Looking to chart when a host/device was last seen.
Host date
server A 3/25/2012
server B 3/24/2012
server C 3/28/2012
Something like that. Date format doesn't have to be that way.
... | dedup host | table host _time
Use eval
instead of fieldformat
.
Okay but when I got od odo a fieldformat such as
| dedup host | fieldformat Stime = strftime(_time,"%m/%d/%Y") | table Stime
I get no output.