I have the search:
| tstats count where index=fologs module IN (G*) by module
| sort -count limit=8
But I have a problem - there are several modules with name G10MIP* which always have min count 30, so I want to show only count >30 for modules with name G10MIP*
Hi, @Luninho,
Please try below;
| tstats count where index=fologs module IN (G*) by module
| where NOT (like(module,"G10MIP%") AND count < 31)
| sort -count limit=8
If this reply helps you, an upvote is appreciated.
Hi, @Luninho,
Please try below;
| tstats count where index=fologs module IN (G*) by module
| where NOT (like(module,"G10MIP%") AND count < 31)
| sort -count limit=8
If this reply helps you, an upvote is appreciated.