Query Library
New postPost queries you find useful or lookup examples to help get you started with searching your data.
Show all
Sort by newest post
-
Metrics Operators Cheat Sheet Pinned5 votes 1 comment
-
New Log Operators Cheat Sheet Pinned2 votes 0 comments
-
Query to search log-in failure more than 10 times in 1 minute.1 vote 0 comments
-
Unchanged user password query for certain time frame0 votes 5 comments
-
New users who have not changed their passwords0 votes 5 comments
-
Unable to find the query functionalities for the below requirements.0 votes 0 comments
-
get duration time between 2 events that have nothing in common0 votes 0 comments
-
Query Output0 votes 1 comment
-
Creating a Dashboard0 votes 4 comments
-
left join operator0 votes 1 comment
-
Threat Intel Enrichment query with toURL operator0 votes 0 comments
-
Using variables as json key parsing0 votes 1 comment
-
各ユーザの点数から偏差値を計算するクエリ0 votes 0 comments
-
Regex for multiline processing0 votes 5 comments
-
Sharepointサイト毎の使用量を計算するクエリ0 votes 0 comments
-
長いタイムスタンプを見やすい形式に変換する方法0 votes 0 comments
-
ログからタイムスタンプを抽出してタイムゾーンを変換するクエリ0 votes 0 comments
-
How to use the original data after aggregation?0 votes 2 comments
-
create alert for no data seen0 votes 1 comment
-
Metric query fillmissing0 votes 1 comment
-
Query Oracle DB table and feed results to Sumo0 votes 0 comments
-
IIS binded site query0 votes 1 comment
-
Parsing Regex Multi from Nested JSON Array Blobs0 votes 1 comment
-
convert decimal value to IP address2 votes 1 comment
-
Calculate a value from two log queries0 votes 1 comment
-
Enumerate Systems/Sources Monitored0 votes 1 comment
-
Splunk equivalent queries in Sumo0 votes 1 comment
-
"cannot parse string as number"0 votes 1 comment