I have a file structure shown above in the Sumo Logic system. I was hoping the following query would put the saved data in the shown Data folder, but it does not. How should I be writing the file path to get the data to show? I also need the data to be shared (I shared the Data directory), in order to use this in another query's lookup.
| first(_sourceHost) group by _sourceHost
| fields _sourceHost
| save Data/Servers.lkup
Please sign in to leave a comment.