i indexed my log file line by line using regex, i want only valid rows not headings and lines , but in my query results those headings and lines are included. How to omit those in results?
my log file sample
SNAP_TIME app Sector MEMBER NO_HANDLE PRIVATE_SORT
2018-02-02-04.16 SC_SAS_QV MINOR_SC 36 17160 48576
2018-02-02-04.16 SC_COGNOS MINOR_SC 3056 18220 256
2 record(s) selected.
query:
index=XXX source=XXX|rename app as APP_HAN Sector as File_D MEMBER as REGIME|table APP_HAN File_D REGIME
Actual Result:
APP_HAN File_D REGIME
APP Sector Member
SC_SAS_QV MINOR_SC 36
SC_COGNOS MINOR_SC 3056
