Hi,
is it possible to roll specific buckets to frozen? I have some buckets which the customer wants to be deleted (don't ask why), and I would kindly ask if this is possible without stopping S...
...n some, none on others. The issue we are running into is when trying to create a RegEx code manually; we've been using Reg101 which is able to pull the information that we need using these e...
I am trying to create a search that is pulling geographic IP information about the users and showing which server was getting the requests at that location. I have this working completely and s...
Hello there
What I'm doing is extracting fields from my log file and every entry has about 20 fields separated by commas, some of them empty. Something like this:
FULL,34,32136783,2012-03-07 1...
So I have mass copied the search app from Server A to Server B (Along with the users directory) to basically copy over all the reports and dashboards.. however now I'd like to delete about 100 r...
...tats count(userID)
This extracts user IDs from a csv file (that is our sourcetype)
When I go to the Fields Extraction page and edit the extraction manually, I don't get any results (actually, it r...
...ould probably make it better given some tweeking. The "add oneshot" command actually works very well and it is the first time I am learning aboutthis useful command. My problem I believe is t...
...hese logs would be restored to a new temp folder, I think it would be something like /datatemp/. How would I set it up to pull this logs in, but without the /datatemp/ in the source ?