Saved data not showing up anywhere I expect

November 09, 2018 16:27

I have a file structure shown above in the Sumo Logic system. I was hoping the following query would put the saved data in the shown Data folder, but it does not. How should I be writing the file path to get the data to show? I also need the data to be shared (I shared the Data directory), in order to use this in another query's lookup.

_collector=saas.aws.mt.ade.optiva*
| first(_sourceHost) group by _sourceHost
| fields _sourceHost
| save Data/Servers.lkup

Comments

4 comments

Official comment
Angad Singh

November 09, 2018 16:47
Hi David,

Unfortunately today the saved files don't appear in the content file structure. We are currently working on addressing that as part of the revamp for saved files within Sumo Logic. The development in under progress and we will have this capability in the product soon.

Regards

Angad

Product Team, Sumo
Comment actions Permalink
David Cushing

November 09, 2018 17:39
When I try and use the file that I have written, it says it isn't shared. The Data directory is shared, what do I need to do in order to share the file?
0

Comment actions Permalink
Angad Singh

November 09, 2018 19:32
Hi David,

I assume you are using the saved file in the Search Template Parameter Auto complete setup. We only allow files that are shared to be used inside Search Templates because if you use a personal file then you cannot share your search template.

In order to share a saved file your save path has to start with

/shared/[rest of your path]

so basically your above file should be saved something like

/shared/Data/Servers.lkup

Regards

Angad
0

Comment actions Permalink
Bowei Chi

October 09, 2019 19:44
Hi there,

Where can you find the list of files in /shared directory?

Is there a way to delete files no longer needed there?

Thanks!
0

Comment actions Permalink

Please sign in to leave a comment.

Comments

Didn't find what you were looking for?