$DATE is getting displayed on logcompare

Follow

lakshman.t _

• October 01, 2021 06:30

I m doing logcompare on our logs.Upon doing logcompare getting $DATE in the result which is annoying.One more thing i want to know whether we can do log compare in individual field.

Suppose we have _raw={"timestamp":"11111","message":"hi","level":"error"}

i want to do logcompare on message field.How to do this?

0

• 

  lakshman.t _

  • October 01, 2021 06:32

  This is the  sample result of logcompare {"timestamp":$DATE,"role":""ajs"

   

  0

  Comment actions Permalink

Please sign in to leave a comment.