Notes from Splunk Training
eventstat keep the field name even if it is renamed
Last updated 3 years ago