I'd like to implement some basic searches for network infrastructure monitoring without getting caught up in the differences between sourcetypes and field names.
Are there any basic searches that provide middleware monitoring without me having to deal with the complexities of the sourcetype differences? Something akin to Network Traffic in the Common Information Model, perhaps?
The answer for this question has been distributed to the following posts:
The answer for this question has been distributed to the following posts:
Replaced the answer with its new homes.
Added guidance on Alerts