- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jip31
Motivator
09-15-2018
01:23 AM
Hello
I want to display the field "chemin d’accès de l’application défaillante" in my report from the code below:
index="windows" sourcetype="wineventlog:*" "SourceName=Application Error" Type="Critique" OR Type="Avertissement" OR Type="Erreur" faillante | dedup _time SourceName | table _time SourceName Chemin d’accès de l’application défaillante | stats count by SourceName | sort - count limit=10
But this field isn't displaying...
What do I have to do to be able to use this field?
Is it possible to do a "field extract" like we can do in a log?
could you help me please??
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

harishalipaka
Motivator
09-15-2018
03:11 AM
hi @jip31
| table _time SourceName "Chemin d’accès de l’application défaillante"
Thanks
Harish
Harish
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

harishalipaka
Motivator
09-15-2018
03:11 AM
hi @jip31
| table _time SourceName "Chemin d’accès de l’application défaillante"
Thanks
Harish
Harish
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
jip31
Motivator
09-15-2018
08:49 AM
MANY THANKS!
