Baselining Dashboard Fun Stuff & Helpful Hints SplunkMasterFlex Vote Up +2 Vote Down -0You already voted! This is better and more flexible option then timewrap in my opinion. Performance ain’t too shabby either. index=foo earliest=-1d latest=now | timechart span=10m count as Current | appendcols appendcols Continue Reading →
