Search for duplicate events in Splunk Hygiene Azeemering Vote Up +16 Vote Down -2You already voted! index=<indexname> | stats count values(host) values(source) values(sourcetype) values(index) by _raw | WHERE count>1 Share This: Tagged: duplicate
