Hello,
I have 16 AWS rules and would like to make a dashboard/report of the frequency they fire week/month/year. Is this possible in an efficient manner?
Thank You
Figured out the answer to my own question.
index=notable search_name= *AWS* |stats count by search_name |sort - count |
Figured out the answer to my own question.
index=notable search_name= *AWS* |stats count by search_name |sort - count |