List Deployment Client

index=_internal sourcetype=splunkd "deployment_client" 
|stats latest(_time) as LatestReportTime values(server_name) as Server_Name by host |convert ctime(LatestReportTime) |rename host as Host
|fields + Host Server_Name LatestReportTime
Share This:

Leave A Comment?