Hi,
I've got a search that returns me the following results:
Basically, I would like to only keep the most recent events for an IPAddress IF the field IPAddress has multiple events at 2 different time and discard the oldest event. In the case of the screenshot above, I would like to remove the highlighted line.
Would that be possible? Let me know if you need more information.
Thanks
... View more