Rather than building a full custom command to do the following:
| duration outputfield=cleanTime seconds
I know thefunction's code are locked and are part of the source code but can I add to it?
...larity and supportability (the "OR" clause will continue to grow for this event type), I need to avoid the iteration andusethe eventtype.
|rename DELPHI_REQUEST.REQUEST.COMMAND as "COMMAND"
I am getting below output where coalesce is not printing the value of field DELPHI_REQUEST.REQUEST.COMMAND i...