Avatar

James Sperry

Follow
  • Total activity 13
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 0
  • Subscriptions 0

Activity overview

Latest activity by James Sperry
  • Avatar

    James Sperry commented,

    1. Community
    2. Sending Data
    3. Any way to start a long query, and just email me when it's done?

    That works.  It would be neat if there was an option to "email me when it's done". This solution works for my use case. Thanks

  • Avatar

    James Sperry created a post,

    Any way to start a long query, and just email me when it's done?

    1. Community
    2. Sending Data

    I have a query that I'd like to search over the last 30 days, and I know it will take a while.  Is there any way I can just tell SumoLogic to run it one time and send me the results rather than set...

    • James Sperry
    • 0 followers
    • 2 comments
    • 0 votes
  • Avatar

    James Sperry commented,

    1. Community
    2. Sending Data
    3. Status showing logs, can't find them in search

    I found part of the issue, the hostname was being set as the AWS Instance ID, rather than the name I set in /etc/sumo.conf Also, I set the Source Category at the host level, and now I'm seeing the...

  • Avatar

    James Sperry commented,

    1. Community
    2. Sending Data
    3. Status showing logs, can't find them in search

    also tried different timeframes.  Data started coming in around 3:40pm PST Tried "Today", -1h, and "-1h to +12h" Data is from today.

  • Avatar

    James Sperry created a post,

    Status showing logs, can't find them in search

    1. Community
    2. Sending Data

    Just added a new host, and I see in the Manage > Status area that data is coming in.  I'm not able to find it in search though. I tried searching by _sourceName, _sourceCategory, _source, and _sou...

    • James Sperry
    • 1 follower
    • 4 comments
    • 0 votes
  • Avatar

    James Sperry created a post,

    Data Volume Index - Volume for Each Collector

    1. Community
    2. Sending Data

    http://help.sumologic.com/Help/Default.htm#Data_Volume_Index.htm The Volume for Each Collector query produces an error: There was a problem running your search. _index=sumologic_volume _sourceCa...

    • James Sperry
    • 0 followers
    • 2 comments
    • 0 votes
  • Avatar

    James Sperry created a post,

    Is there a way to dedupe results?

    1. Community
    2. Sending Data

    I've got a search which returns a list of extracted fields.  Is there a way to dedupe these results, and only show one line item? 

    • James Sperry
    • 0 followers
    • 1 comment
    • 0 votes
  • Avatar

    James Sperry commented,

    1. Community
    2. Sending Data
    3. What am I doing wrong?

    Actually, it was the quotes around the IP, but you pointed me in the right direction. Thanks.

  • Avatar

    James Sperry created a post,

    What am I doing wrong?

    1. Community
    2. Sending Data

    Search: DHCP_SNOOPING_DENY | parse regex ":.*? (?<switch>.*?) .*? on (?<port>.*?), vlan (?<vlan>.*?)...(?<mac\_address>.*?)\/(?<ip\_address>.*?)\/" | where ip_address != 169.254.197.160 Error: S...

    • James Sperry
    • 0 followers
    • 2 comments
    • 0 votes
  • Avatar

    James Sperry created a post,

    agent install, do you need access keys?

    1. Community
    2. Sending Data

    Previously, when installing an agent using the RPM, you would get an activation key.  Now it asks for the  access key in /etc/sumo.conf   Is there a way to get the activation key, and input it in...

    • James Sperry
    • 0 followers
    • 1 comment
    • 0 votes