Rather than building a full custom command to do the following:
| duration outputfield=cleanTime seconds
I know thefunction's code are locked and are part of the source code but can I add to it?
...larity and supportability (the "OR" clause will continue to grow for this event type), I need to avoid the iteration andusethe eventtype.
...rite my queries to tstats, and I think what I tried to do here is in line with the recommendations, i.e. I repeated the same functions in the stats command that I use in tstats andused the same BY c...
|rename DELPHI_REQUEST.REQUEST.COMMAND as "COMMAND"
I am getting below output where coalesce is not printing the value of field DELPHI_REQUEST.REQUEST.COMMAND i...