In our organization we have a lot of people contributing to the query library but, it's difficult to search and find specific queries.
When you publish a query it puts it under Org under your name. I'd like the ability to publish under a team or product group's organizational folder. The only way i can see to do this is to create a sumologic user for each of these groups and have someone log on with that user and import the query. This is definitely not an ideal work flow.
My question is, is there something i'm missing here? How can i publish a directory to the top level of the Org Library? If i'm able to do that how do i instruct users on how to publish their queries to their org directory? This question stems from i had another user who setup a scheduled query and it was alerting the group. However, the query was incorrect and i couldn't tell whose query it was that was alerting us.
Please sign in to leave a comment.