Matt Sullivan
- Total activity 49
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 28
Activity overview
Latest activity by Matt Sullivan-
Matt Sullivan commented,
Official comment if by total, you mean within the timeslice, and you are only alerting based on the count, no longer using outlier's standard deviation approach, just replace the outlier line with| where _count >...
-
Matt Sullivan commented,
Official comment Sorry for delay. Long answer here. Bear with me. 1. Using lookup today works only vs. individual IPs, not ranges. Idea 1834 is one you can upvote which would make range lookups easier. 2. there is...
-
Matt Sullivan commented,
Official comment there is a hex to decimal conversion operator https://help.sumologic.com/05Search/Search-Query-Language/Search-Operators/hexToDec also hex to ASCII : https://help.sumologic.com/05Search/Search-Qu...
-
Matt Sullivan commented,
Official comment there is a hex to decimal conversion operator https://help.sumologic.com/05Search/Search-Query-Language/Search-Operators/hexToDec also hex to ASCII : https://help.sumologic.com/05Search/Search-Qu...
-
Matt Sullivan commented,
Official comment assuming you want to just show results from category1 where Id from category 2 is present, you might opt to move the subquery to the scoping portion of the query, and presuming category1 does not h...
-
Matt Sullivan commented,
Official comment this could be any number of conditions, I would highly recommend getting a support case open for this one.
-
Matt Sullivan commented,
Official comment prob best to split the Time into its parts, then you have an actual integer where compares work, e.g. | split Time delim=':' extract 1 as hh, 2 as mm, 3 as ss| where hh > 15 and hh < 23 hope...
-
Matt Sullivan commented,
Official comment Sorry for the delay answering. We're frequently adding to our offerings on Azure (as well as AWS and GCP) so this answer may become outdated and I would recommend perusing the release notes from ti...
-
Matt Sullivan commented,
Official comment Sorry for the delay on this one. If you haven't already, definitely open a support ticket (or keep working the existing one if already opened) so we can help track this down. I would include detail...
-
Matt Sullivan commented,
Official comment this sounds a lot like an idea that is gaining traction: https://ideas.sumologic.com/ideas/SL-I-2271 that you may wish to upvote. for your specific use case, sounds like you wrote the monitor code...