Hello, I am looking to create a Boolean logic validation checker for a match. I am attempting to use makeresults in a sub search to create a field with a string I am looking for. Then I am using search to attempt to look for the newly created event but it doesn’t seem to be working.
“ index= test
[|makeresults count=1
| eval index=test
| eval command=“ping 8.8.8.8”
| table command]
| search ping AND 8
”
... View more