Hello,
I have searched around, but I haven't found an example that has shown me the way.
What I am trying to do is a search on one location, and compare the stats with another location.
Here are the two searches:
host="server01" OR host="server03" source="/opt/httpd/logs/access_log" | stats count by status | rename count AS countA
and
host="server13" OR host="server14" source="/data/logs/apache/access_log" | stats count by status | rename count AS countB
I would like to output this information to a csv file that would look like this, using the static error code as one column, and then the variables countA and countB:
status,countA,countB
200,563805,6345
206,10,1345
301,33529,345
302,84470,673468
304,1747,46
400,42,23
403,36,346
404,25,46
500,29,45
502,2,345
The best that I was able to do was to get them all into the file, with duplicate entries for the status codes...
Any ideas?
... View more