Query Library
New postPost queries you find useful or lookup examples to help get you started with searching your data.
Show all
Sort by votes
-
Metrics Operators Cheat Sheet Pinned4 votes 1 comment
-
New Log Operators Cheat Sheet Pinned2 votes 0 comments
-
Security-Related Queries for Palo Alto Networks and Other Firewalls3 votes 0 comments
-
Security-Related Queries for AWS2 votes 0 comments
-
finding the ratio of aggregated result?1 vote 1 comment
-
Identify Known Crawlers/Bots in AWS Load Balancer (ALB or ELB) Logs1 vote 1 comment
-
How do I write a query to list all the keys in a json log?1 vote 12 comments
-
New! Regex Cheat Sheet1 vote 0 comments
-
Query messages before and after errors1 vote 2 comments
-
Security-Related Queries for Linux1 vote 0 comments
-
Security-Related Queries for Windows1 vote 2 comments
-
Organizing Query LIbrary1 vote 1 comment
-
Parsing URL correctly1 vote 3 comments
-
Top 10 IP Addresses by Timeslice1 vote 0 comments
-
lookup operator with compareCIDRPrefix0 votes 2 comments
-
lookup operator with dynamic url?0 votes 0 comments
-
Generating AD Group membership report(Domain, Schema, Enterprise admins)0 votes 0 comments
-
Use _count as column (subquery)0 votes 2 comments
-
Stacked chart with time compare0 votes 0 comments
-
Time compare question0 votes 0 comments
-
Hide count paramterin my chart0 votes 2 comments
-
In operator within an if statement not functioning as expected0 votes 1 comment
-
different count with contains0 votes 2 comments
-
Parse time by combining logs0 votes 1 comment
-
count_distinct with a regularcount0 votes 2 comments
-
How to do stddev on both latitude and longitude?0 votes 1 comment
-
How to do subquery?0 votes 1 comment