Many of you are using these 2 commands as though they work the same, but there are some VERY important differences between the that you MUST understand or you will get Gotcha'd. This will be an interactive session where
1: Gregg will ask a question,
2: Gregg will poll the users,
3: Gregg will post searches that demonstrate the answer(s).
All you need is splunk installed on your laptop!