Avatar

David Woller

  • Total activity 23
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 2
  • Subscriptions 16

Activity overview

Latest activity by David Woller
  • Avatar

    David Woller commented,

    Official comment

    Hey Kevin, I think the transaction operator may be what you're looking for. This allows you to specify "states" within the logs from given strings of text, and I think that you coul use this to cre...

  • Avatar

    David Woller commented,

    Official comment

    Hello Arturo, I believe the issue with your current search is the use of the quotes around the wildcard string. If you remove the quotes and use _sourceCategory=some/thing/here/* without the quotes...

  • Avatar

    David Woller commented,

    Official comment

    Hello Iran, We currently do not have any failover mechanisms for centralized collectors; if the collector goes down then the logs that would have been ingested during the failure will be lost. The ...

  • Avatar

    David Woller commented,

    Official comment

    Hi Gordon, I believe the timeslice operator is what you're looking for. It allows you to see a histogram of count over time "slices" that you can specify. For example, "timeslice 15m" will divide t...

  • Avatar

    David Woller commented,

    Hi Bill, I was able to put together the following regex to parse the message that you specified above.The regex statement below will count out 22 non-carriage return characters from the start of th...