I'm trying to filter out a couple subnets using regex. This works fine: | regex connection.ip != "^172.16.\d{1,3}.\d{1,3}$" but when I'm having troubles excluding another subnet.
This does not ...
I'm trying to run a very basic search against XML formatted events:
sourcetype=ilo:events | xmlkv
I'm getting the following error back from my search head:
9 errors occurred while the se...
Hi, I have a question for my understanding. Kindly help. You had data in the past, one fine day if you see there is no data, how do you troubleshoot? Regards Suman P.
I have a search that filters out the value of account number from a log entry USING A REGEX extraction -->
sourcetype="SysLog" | rex field=_raw "To BOA-(?<accountno>\d{1,11})" | dedup a...