Hello Team, I need help in extracting the following date and time from the log, sample log: -0900, 04.25.01 THU 22FEB24 nDD62320I I need the 04.25.01 THU 22FEB24 part, could someone please help in extracting this using rex Any help is much appreciated ... View more

Hello Team, I have log like this, File Records count is 2 File Records count is 5 File Records count is 45 File Records count is 23 and I have extracted the values 2,5,45,23 as a separate field called Count. When I use "base search| table Count"  I am getting the expected value in a stats table But I want 2,5,45,23 to be plotted in the line graph. I tried stats commands but its only showing the no. of events of Count but not the values of count. Could you please provide your assistance on how can I plot the values of Count into a graph. ... View more

Hello Team, I have logs with the below pattern 08/31/2023 8:00:00:476 am ........ count=0 08/31/2023 8:00:00:376 am ........ process started 08/31/2023 8:00:00:376 am...... XXX Process I need the process name and the count to be displayed together but I dont have any common values/names/strings to match them. I have 4 similar process and the count together in the logs..is there a way on how we can match them together. Any help is much appreciated. ... View more

Hello Team, I have a bar graph representing data, When I keep the timechart span=15m and run the search for 1h The value for the last 15 mins is showing high and after sometime if I run the same search the value is showing normal. Is it an expected behaviour and why is it happening like this. How to fix this, any help is appreciated. Eg 9:00 - 9:15 30 9:15 - 9:30 36 9:30 - 9:45 45 9:45 - 10:00 180 After sometime 9:45 - 10:00 49 ... View more

Hello Team, I would like to schedule a report which needs to be running on the first business day of the month. Could you please let me know if this is possible. ... View more

Hello Team, I need to have top 10 url's in the order of max average response time taken. Could you please help in that.. My base search: index= host=  source=" " | timechart span=1h  avg(response_time) by URL Can we use limit command to get the top 10 URLs ... View more

Hello Team, Could you please suggest on how to create an overlapping graph which compares this week's data and previous week's data excluding weekends. Any help is very much appreciated. My base search is very simple. index=my index source=/.log '#search string#' | time chart span=1h count(_raw) by host   ... View more