Identifying Malicious Users

Comments

1 comment

  • Official comment
    Avatar
    Nick Wilson

    Hi John,

    This is most likely because the parse operator drops rows if there is no match on the pattern. You would need to add the "nodrop" option to the end to keep the rows that don't match.

    Of course this means that your patterns may be off since they aren't matching, but the nodrop option should help you troubleshoot that. I recommend working on one parse statement at a time to figure out the culprit.

    I hope this helps but let me know!

    Thanks,
    Nick
    Customer Success, Sumo Logic

    Comment actions Permalink

Please sign in to leave a comment.