I have a query that calculates a certain value when a particular condition is met.
| eval Other_Failures = Total_requests - (OpFail + FuncFail) | where httpcode!=200
But I'm not getting any events from this. How can I correct this?
... View more
your_search
| rex "measures:\s+\{\s+(?<your_field>[^:]+)" but the issue with this query is this particular field keeps on changing, so the query should be dynamic to pick the field which is coming in.
... View more
measures: { API.V1.WEBS_ENTITLED_PRODUCTS: 296 success: 300 } metadata: { downlink: 10 effectiveType: 4g } name: WIDGET_LOAD.PIU the thing here is I need a query which shows the API that is responsible for a widget load. so I need a table which shows : WIDGET. | API ------------------------------------------------------------------- WIDGET_LOAD.PIU |. API.V1.WEBS_ENTITLED_PRODUCTS
... View more
I have the logs in this way :
measures: { API.V1.WEBS_ENTITLED_PRODUCTS: 296 success: 300 }
what can be the query so that i can display the field " API.V1.WEBS_ENTITLED_PRODUCTS" and not its value.
I want the output as "API.V1.WEBS_ENTITLED_PRODUCTS"
... View more