For a particular sourcetype I am facing log ingestion issue. Getting below error.  As checked with the team, this log file can not be split. So is there any solution to resolve this issue.   ... View more

I've made a dashboard to show some statistics on it. The information that appears on my dashboard differs from that of my users. A Studio Dashboard is used to design the dashboard. I checked the time zone and me and other user both are in same time zone.  What could be the issue? Please guide me. ... View more

I need to create below dashboard .This will be the main dashboard and from here I can navigate to any of the other mentioned dashboards. AAA, BBB, CCC are the separate dashboards and all these should be accessed form this main dashboard.        ... View more

index="xyz" sourcetype = abc" | search Country="ggg" statusCode=200 | stats count as Registration | where Registration =0 Could you please help me to modify this query. Time period is last 24 hours.  ... View more

I want to get an alert when there is switch between events for the first time. Below is the example for this.  index=abc sourcetype=xyz <warning> index=abc sourcetype=xyz <critical> These 2 queries I have and I want an alert when there is switch between from <warning> to <critical>. Please help with the query. ... View more