I want to add the number of events generated monthly to a dashboard. Any ideas on the search criteria needed for this request?
actually i apologize i wrote the question wrong, we use Enterprise Security -> Incident Review and i want to get the number of fired events for the month that i can add to my dashboard. hope this makes sense.
Hey, try this:
| tstats count where index=* OR index=_*
actually i apologize i wrote the question wrong, we use Enterprise Security -> Incident Review and i want to get the number of fired events for the month that i can add to my dashboard. hope this makes sense.