These two cells are examples of results I see in IIs logs.  If the field is just a / (backslash) ( as in the first example data cell ) I want to return just the /.  If there are characters after the first / (like search in #2) , I need to return the text between the backslashes.   / /search/20191108/master.svc   My results would look like this.  field1 root    search ... View more

I want to get a list of distinct Users from IIs logs using the CS_USERNAME field Any examples out there for me to get that info? ... View more

We have Multiple servers that all end with the same few letters like this. Office1Server Office2Server Remot1Server Remot2Server Remot3Server I want to return results that look like this OfficeServer 10 RemotServer 23 index=stuff* host=*SERVER "Deployed successfully" | cluster t=0.35 field=host Is that possible and if so, what do I change my search to? ... View more