Saved data not showing up anywhere I expect
I have a file structure shown above in the Sumo Logic system. I was hoping the following query would put the saved data in the shown Data folder, but it does not. How should I be writing the file path to get the data to show? I also need the data to be shared (I shared the Data directory), in order to use this in another query's lookup.
_collector=saas.aws.mt.ade.optiva*
| first(_sourceHost) group by _sourceHost
| fields _sourceHost
| save Data/Servers.lkup
-
Official comment
Hi David,
Unfortunately today the saved files don't appear in the content file structure. We are currently working on addressing that as part of the revamp for saved files within Sumo Logic. The development in under progress and we will have this capability in the product soon.
Regards
Angad
Product Team, Sumo
Comment actions -
Hi David,
I assume you are using the saved file in the Search Template Parameter Auto complete setup. We only allow files that are shared to be used inside Search Templates because if you use a personal file then you cannot share your search template.
In order to share a saved file your save path has to start with
/shared/[rest of your path]
so basically your above file should be saved something like
/shared/Data/Servers.lkup
Regards
Angad
Please sign in to leave a comment.
Comments
4 comments