Hi,
is there anyway to pull a report to get the data of log where DEBUG level log is enabled, based on the index and sourcetype?
I am using below query to get the data:
index=myapp sourcetype=ejb_app_logs DEBUG | eval GB=b/1024/1024/1024 | timechart span=1d sum(GB) by s useother=false