Hi all ,
This is my problem : I have a table with time,log and host.
sample :
host 1 <event log> 2018-06-05 23:01:30
host 2 <event log> 2018-06-05 23:01:30
host 2 <event log> 2018-06-05 23:01:29
host 3 <event log> 2018-06-05 23:01:29
host 1 <event log> 2018-06-05 23:01:28
host 3 <event log> 2018-06-05 23:01:28
host 1 <event log> 2018-06-05 23:01:27
host 2 <event log> 2018-06-05 23:01:27
host 3 <event log> 2018-06-05 23:01:27
......
Now i want to only get was the latest and the previous
like this :
LATEST
host 1 <event log> 2018-06-05 23:01:30
host 2 <event log> 2018-06-05 23:01:30
host 3 <event log> 2018-06-05 23:01:29
PREVIOUS
host 1 <event log> 2018-06-05 23:01:28
host 2 <event log> 2018-06-05 23:01:29
host 3 <event log> 2018-06-05 23:01:28
Is there a way or workaround to get this result ?
Thanks in advance
use dedup
command to get latest 2 events :
...|dedup 2 host
I am not aware that i can do this , will definitely try this