Graham Watts
- Total activity 29
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 14
Activity overview
Latest activity by Graham Watts-
Graham Watts commented,
Hi Adrian,We have a few different technical teams that may be able to help you - shoot me an email at Graham@sumologic.com and I can connect you. Luckily our collector has a syslog source, so simpl...
-
Graham Watts commented,
Hi Hirak,You can do this using the below steps: 1. Parse out the stack trace using parse anchor or parse regex, depending on how the info you need to parse appears in the log (if it's a json log, y...
-
Graham Watts commented,
Another option is Subquery, where you can use values form one query to filter the results in another.Also, if you just need to return results for both queries into one by searching with OR:Query 1:...
-
Graham Watts commented,
The challenge here is that the json is wrapped in plain text due to syslog forwarding. We need to extract the json portion and then Sumo will print out the JSON for you in an easy to read and parse...
-
Graham Watts commented,
Hi Sarah,I have just tested and both of these will work: | compose user_name maxresults=10000] | compose user_name maxResults=10000] The warning that you are seeing is likely related to the numbe...
-
Graham Watts commented,
Hey Sarah,Can you post a sanitized version of your query with the subquery here so I can take a look?
-
Graham Watts commented,
Hey Ramakrishna, This is interesting, I think this subquery will work: The key is to hack the subquery to only return some string if the 5% threshold is met If it's met, I pass some text in every ...
-
Graham Watts commented,
Hey Nikhil,We don't support regex in role definitions, so in this case the best way to build your role would be:_sourceCategory=env_*/app/app* (wildcarding)or (_sourceCategory=env_*/app/app1 or _s...
-
Graham Watts commented,
Hi Karthik,You would need to reset the MFA to get another set of backup codes, so you would disable it then recreate MFA.Thanks,Graham
-
Graham Watts commented,
Hi Mike,It looks like we are developing enhancements to our Audit logging, which should include a "collector stopped" log. If you don't mind, can you please vote and comment on the below Aha featur...