Splunk equivalent queries in Sumo
Hi there,
Please help me finding the Splunk query equivalent function in Sumo.
What is the equivalent query function in Sumo for below functions?
earliest
coalesce
-
1. earliest
you have to use Time Range icon in Sumo UI.
https://help.sumologic.com/05Search/Get-Started-with-Search/Search-Basics/Time-Range-Expressions2. coalese
you can rename all fields like below
| ip_address as ip
| src_ip as ip
| dest_ip as ip
Please sign in to leave a comment.
Comments
1 comment