Hello
I want to display the field "chemin d’accès de l’application défaillante" in my report from the code below:
index="windows" sourcetype="wineventlog:*" "SourceName=Application Error" Type="Critique" OR Type="Avertissement" OR Type="Erreur" faillante | dedup _time SourceName | table _time SourceName Chemin d’accès de l’application défaillante | stats count by SourceName | sort - count limit=10
But this field isn't displaying...
What do I have to do to be able to use this field?
Is it possible to do a "field extract" like we can do in a log?
could you help me please??
hi @jip31
| table _time SourceName "Chemin d’accès de l’application défaillante"
hi @jip31
| table _time SourceName "Chemin d’accès de l’application défaillante"
MANY THANKS!