cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
Anand_Raman
Loves-to-Learn Lots
Member since: ‎01-28-2021
‎02-16-2021
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎01-28-2021
Activity Feed
View All

Re: Exclude records from the final result

by in Getting Data In
‎01-29-2021 12:07 PM
‎01-29-2021 12:07 PM
Thanks Soutamo for the reply. The below is my main search  "index="production_index" host="production" source="projects/production/logs/cloudaudit.googleapis.com%2Fdata_access" "protoPayload.authenticationInfo.principalEmail" = "*@.com" protoPayload.serviceData.jobGetQueryResultsResponse.job.jobStatistics.referencedTables{}.datasetId!="_*" protoPayload.serviceData.jobGetQueryResultsResponse.job.jobStatistics.createTime=*" I'm parsing GCP logs to find number of users per dataset. One SQL may contain reference to multiple datasets and when I exclude the control tables in my search the whole event is being excluded. ... View more

Exclude records from the final result

by in Getting Data In
‎01-29-2021 10:11 AM
‎01-29-2021 10:11 AM
  Hi, I have a situation where I have to exclude certain records from the final result only. I don't want to include in the initial search criteria because it excludes the whole event. For example  a single event may contain many tables and if I exclude a certain table  in my initial search I'm getting a wrong count of other tables . I just want those table removed from my final results. Thanks ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎02-16-2021 05:09 PM