Find duplicate events Hygiene gr33nlant3rn Vote Up +0 Vote Down -0You already voted! index=<specify index> | eval x=sha256(_raw) | stats count values(host) values(source) values(sourcetype) values(index) by x | where count>1 Continue Reading →