Piotr Woch
- Total activity 37
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 20
Activity overview
Latest activity by Piotr Woch-
Piotr Woch commented,
Yes, definitively there is a way to achieve this type of grouping in Sumo by using a combination of two operators: transactionize and merge. Please take a look at the transactionize operator here: ...
-
Piotr Woch commented,
Hi Michael, Your approach of configuring two alerts seems to be the most suitable. Given the fact you can't name two different alerts the same way, have you considered differentiating the names by...
-
Piotr Woch commented,
Hello! I would recommend reviewing the documentation and trying out using "transactionize" operator (https://help.sumologic.com/Search/Search-Query-Language/Transaction-Analytics/Transactionize-ope...
-
Piotr Woch commented,
Currently we are running a Beta program for our new operator: subquery. It should allow you to do things you are looking to do - please just be mindful it is in a beta program right now: https://he...
-
Piotr Woch commented,
Hi Ben! I've just checked and found no more data in the _sourceCategory="uploads/other". If you could please bring it back into your Sumo account, I would be happy to look into your question furthe...
-
Piotr Woch commented,
Hello! Unfortunatelly, that feature is not yet available, but has been requested before by other customers, too. Would you mind visiting this site an upvote the enhancement request we have open for...
-
Piotr Woch commented,
Hello Haribaskar! Please try using the following regex expression for end-of-line marker recognition: 1) Click the link to edit options for your data source (under Manage Data/Collection) 2) In the...
-
Piotr Woch commented,
Hi Behrang! Please try the following query: _sourceCategory=exampleApplication* | parse "login_status=*" as login_status | if(login_status="success",1,0) as was_success | timeslice 1d ...
-
Piotr Woch commented,
Adam, I think the last step from achieving your goal is to remove the unnecessary "transpose" operator. Try running the exact same query you posted in your last post, take away the "transpose" oper...
-
Piotr Woch commented,
The error complain that it can't find the "Time" field. Even though the column header says "Time", from within the query the field name is different. In this case it would be "_timeslice". Please t...