Hi all, I have the following events source_host=lioness1 source_host_description="This is the main server" source_host=lion source_host_description="This is SQL server"   I need to extract the description, which is all the text between double quotes and assign it to the field description. Would you please help?     ... View more

Hi all, I need to create an alert based on a success rate less than a specific value. My data is as follows: store = "store1" result= "success" store = "store1" result= "success" store = "store1" result= "success-with-warnings" store = "store1" result= "failed" store = "store2" result= "success-with-warnings" store = "store2" result= "failed" store = "store3" result= "success-with-warnings" store = "store3" result= "success" I need to calculate the success rate based on each store. Result = "success" or "success-with-warnings" are considered a success, all other result values are considered failed. For example, using the above data, the search result should be something like this: store1 %75 success store2 %50 success store3 %100 success Then I need to use those values to create an alert, that will be triggered daily to check stores with a success rate is less than 70%. So in this case, I will get an alert for store2.             ... View more