Turning to the wisdom of the Splunkers,
I have an event called "station status" that basically sends on a daily basis operational info about my stations.
I would like to build a saved report (or any other solution) that holds the most updated event for each station and looking for suggestions on how to approach this.
Please consider:
1. The report can be updated between 3 to 6 times a day
2. I don't want to hold old events from a station. Meaning, if new info arrives regarding a station, it should delete or update the old data.
Thanks in advance,
Eran
... View more