Getting the latest message from all sources


(Andrew Morton) #1

We use Graylog to keep heartbeat signals for our machines.
Is it possible to query graylog in such a way as to see the latest timestamp for each source?

if it helps, here is it in a sql format, if it helps conceptually.

select max(timestamp),hostname from data group by host;

Any ideas?


(system) #2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.