How can you filter searches using parsed variables?

Comments

1 comment

  • Avatar
    Sumo Logic Staffer

    Starting with version 14.x of the service you can use the "where" command. i.e.

    _sourceCategory=webproxy | parse "GET * * " as (website,returncode) | where returncode=404

    0
    Comment actions Permalink

Please sign in to leave a comment.