Avatar

Nicholas Sandmann

  • Total activity 13
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 2
  • Subscriptions 4

Posts

Recent activity by Nicholas Sandmann Sort by recent activity Recent activity Votes
  • Dynamic Field names?

    I have a log that looks like this:     cs1Label="Field Name" cs1="some value" cs2Label="Another Field" cs2="another value"   Is there a way to dynamically parse out the cs# values and give them a f...

  • Rolling timeslices?

    I have an application that logs compliance status as for various application resources as compliant or non-compliant every time an evaluation rule runs, and I'd like to chart the compliance trends ...

  • Charting top 5 events as a percentage of all events

    I need to add a pie chart to a dashboard that shows the top 5 event ID's from my Windows servers as a percentage of all the events(I don't want every event ID in the chart).  Pulling the top 5 even...

  • find events NOT in the lookup list?

    I can use the look up command to find all events where an event contains a value that is in my saved list, like this: (_sourceCategory=mycategory) | parse regex "^<\d+>\d+\s+\d{4}-\d{2}-\d{2}[T|t]\...