I have multiple Parameters and their values lister for each server. I am using the beloq command at last:
chart limit=0 values(abc) over Parameter by Server_Name
No I want only latest Parameter value to be listed for each Parameter for every server. Lets say for parameter "A" we have two values b and c for Server 1 and one value d for Server2. So I want to list only value 'b' for server 1 and value 'd' for Server2 for Parameter "A". Like this for other Parameter as well.
Can someone help me on this?
Use event order function along with chart command
http://docs.splunk.com/Documentation/Splunk/7.1.1/SearchReference/Eventorderfunctions