3 weeks ago
I'm looking to see if anyone knows or has a report that gives a total number of specific replies for whatever date range is input. I'm trying to show total number of NXDOMAIN queries for a month, week, etc. at a time and the DNS Replies report only shows 10 minute intervals and doesn't give an overall total number count.
Does anyone know the Splunk code where I can just input a date range and get a total count of NXDOMAIN or Successfull queries?