Query Library
New postPost queries you find useful or lookup examples to help get you started with searching your data.
Show all
Sort by votes
-
Metrics Operators Cheat Sheet Pinned5 votes 1 comment
-
New Log Operators Cheat Sheet Pinned2 votes 0 comments
-
Security-Related Queries for Palo Alto Networks and Other Firewalls4 votes 0 comments
-
Security-Related Queries for Windows2 votes 3 comments
-
Security-Related Queries for AWS2 votes 0 comments
-
Adding Test Values (or Test Fields) to Existing Log Lines2 votes 0 comments
-
LAB-4 Conditional Operator unable to find results1 vote 0 comments
-
how to get the length of split in the field1 vote 1 comment
-
finding the ratio of aggregated result?1 vote 1 comment
-
Identify Known Crawlers/Bots in AWS Load Balancer (ALB or ELB) Logs1 vote 1 comment
-
How do I write a query to list all the keys in a json log?1 vote 15 comments
-
New! Regex Cheat Sheet1 vote 0 comments
-
Query messages before and after errors1 vote 2 comments
-
Security-Related Queries for Linux1 vote 0 comments
-
Organizing Query LIbrary1 vote 1 comment
-
AD query for successful login from multiple IP’s1 vote 1 comment
-
Parsing URL correctly1 vote 3 comments
-
Top 10 IP Addresses by Timeslice1 vote 0 comments
-
外部結合の方法について0 votes 1 comment
-
既存の定義されたfieldを複製したい0 votes 0 comments
-
Parse JSON in Logs2Metrics0 votes 1 comment
-
Convert splunk query to Sumo logic0 votes 1 comment
-
Parsing based on condition0 votes 1 comment
-
best practices for search0 votes 1 comment
-
Querying using if statement0 votes 2 comments
-
after applying count by _timeslice, can I apply pct on _count?0 votes 1 comment
-
Return +/- 2 minutes logs around an error found within a collection.0 votes 1 comment
-
how to timeslice by a parsed timestamp field0 votes 2 comments
-
Aggregating nested JSON object0 votes 0 comments