Hi, I'm getting an error while attempting to generate a gauge. Search operation 'gauge' is unknown. You might not have permission to run this operation. We have another environment running the same version and build and it works without issue. The command was ran using the admin account. Here's an example of the search string index=prod source="/logs/health.log" "The memory usage" " server1" | rex field=_raw "is (?<gc>.*) " | head 1 | gauge gc 1 1000 1500 2000 Cheers, Jason ... View more

Hi, I've ran in to a problem with an event that has a timestamp but also has another timestamp in the log itself. For example; 17 Jun 2011 13:59:13,691 DEBUG com.message.MessageProcessor:96 - <EventPublishMessage> <oId>123146341</oId> <messageDate>2011-06-17 13:59:13.685 EST</messageDate> <userId>console</userId> <notes>None</notes> </EventPublishMessage> There are two events created, the first being 17 Jun 2011 13:59:13,691 DEBUG com.message.MessageProcessor:96 - <EventPublishMessage> <oId>123146341</oId> <messageDate> and the second 2011-06-17 13:59:13.685 EST</messageDate> <userId>console</userId> <notes>None</notes> </EventPublishMessage> Does anyone know how I can work around this problem? Cheers, Jason ... View more